I just received an email notification about a successful login to my box account from a country I have never traveled to. I didn't see the alert in my inbox for several hours, at which point I immediately changed my password.
I see the attacker login in the security tab, how can I confirm what they did in my account after logging in? How can access historical audit logs to confirm if they deleted or stole data?
Thank you