MacOS – Is it possible to know if a macOS startup drive has been used in another mac

macos

I need to know if the storage drive in a Mac (SSD/flash storage or hard drive), has been used on another machine (same model probably). How can I otherwise know if a file in this Mac or the use of an app has been done in this same Mac, or on another same mac started up after swapping the storage drive?

My idea is that this is not possible as during the boot nothing seems to be written to the startup drive. I know that the log-in can be found with Terminal (Last command), but how can I know this activity has been done in this mac or in another mac with this same storage?

Image added as part of answer by Jaume:
enter image description here

Best Answer

I need to know if the storage drive in a Mac (SSD/flash storage or hard drive), has been used on another machine (same model probably).

macOS logs the computer's MAC addresses in these files: /var/log/daily.out and /var/log/wifi.log.

Since a MAC address (MAC stands in this context for media access control) is unique to every network interface and thus different on every Mac, you can list the current computer's MAC addresses and check if they differ from what has been logged:

  1. Launch the Terminal app, located in /Applications/Utilities.
  2. Run:

    ifconfig | grep -A 2 '^en' | grep ether | sed 's/\(.*\)\(..:..:..:..:..:..\)/\2/'
    

    to list all physical MAC addresses on your Mac.

    Output will be similar to this:

    60:f8:11:8f:f0:00
    e0:f8:43:42:6d:40
    d2:00:11:8f:f0:00
    
  3. Now run:

    sudo grep 'initWithInterfaceAndIE: _myMacAddress' /var/log/wifi.log | sed 's/\(.*\)\(..:..:..:..:..:..\)/\2/' | sort | uniq
    

    to list all logged physical MAC adresses.

    Output will be similar to this:

    60:f8:11:8f:f0:00
    
  4. Compare the output of ifconfig with the logged MAC addresses.

    If a MAC address listed in step 3 is not included in the list from step 2, it is very probable that the internal storage has been used with another Mac.