My phone's SD card got stolen yesterday, and I'm trying to find a way to read the boot up logs. I had left it at work by accident, and I know that it had to have been stolen by one of our employees in the 8 hour window it was there. Now, I pretty much have my suspicion of who took it, but I need a definite point of evidence I can show my boss before I start asking to check our camera files (pointed outside of the breakroom, not actually one in it to certifiably catch anyone). So, seeing as my phone was on and charging the whole time I left it, that someone would have to take my battery out to take the SD card, and that the phone was already booted up when I came back and picked it up--I figure this is my way to tell exactly who it was by tracking back to that time in the room and seeing who exactly was there.
I can't control what this person does with my SD card or the info on it, but I don't care too much seeing as I have nothing to hide. I'm just really pissed because I had a lot of family pictures and pictures of my late dog on there, and I want to pin the person for stealing my crap, tell them to return my card or get me a new one, and get them out of here.
Also, this is unrelated to the boot files, but I connected my phone to my laptop and it shows some Android data folders were edited at a time when I wasn't with the phone yesterday (com.android.vending and com.google.android.youtube, which has a recently edited cache). I'm guessing this either has to do with an automatic update or someone using my phone...I can't see any files in the folder, only when they were last edited. If there's a way you can help me understand what's going on with this and to differentiate what happened, I would also appreciate it.