This is a free and open peer to peer medium for digital and computer forensics professionals and students. Please help us maintain it by contributing and perhaps linking to us from your own website.
55864164 page views since August 2004
Computer Forensics World: Forums
Computer Forensics World :: View topic - USB insertion
bobw Newbie Joined: Oct 18, 2010 Posts: 1
Posted: Tue Oct 19, 2010 7:44 am Post subject: USB insertion
What is the best forenisc process to detemine of a USB device was inserted into a computer.
Patrick4n6 Newbie Joined: Mar 13, 2010 Posts: 24
Posted: Tue Oct 19, 2010 8:53 am Post subject:
SANS published a cheat sheet a while back that covers a fair bit of this issue. _________________ Tony Patrick, B. Inf Tech, CFCE
Patrick Computer Forensics Inc.
Memphis TN, USA Last edited by Patrick4n6 on Sun Oct 24, 2010 12:49 am; edited 1 time in total
farmerdude Newbie Joined: Jan 12, 2006 Posts: 263
Posted: Sun Oct 24, 2010 12:31 am Post subject:
In addition to parsing the ENUM key and values for USB devices look at the setupapi.log file for USB specific information.
www . onlineforensictraining . com
www . forensicbootcd . com
All times are GMT + 10 Hours
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
TMs property of their respective owner. Comments property of posters. © 2007 Computer Forensics Science World. Digital forensic computing news syndication: or Software is copyrighted phpnuke.org (c)2003, and is free under agreement. All Rights Are Reserved.