I got a call from one of our older locations today and they stated this morning they all heard someone say "I can see you. You better run." This particular office area is broken into several separate offices and they had several of the employees that stated they all heard it clear as day. So much so, they called the cops to come clear the office. The phones all belong to a page group, so I am thinking the only thing that makes sense is someone hacked into the system and got in the paging group from one of the phones. They use h323 phones.
My question is, where can I look at logs to maybe see if someone was trying to get in or did get in? Or where is the best place to start to try and find evidence to confirm this is the case or not?
My question is, where can I look at logs to maybe see if someone was trying to get in or did get in? Or where is the best place to start to try and find evidence to confirm this is the case or not?