About this tag
USB analysis on Windows involves examining artifacts left by USB storage devices to determine if they were involved in malicious activity. Tools like USBDeview can view installed or connected USB devices. The process includes gathering and interpreting these artifacts, which is crucial for network security as USB drives pose ongoing challenges. This tag covers techniques for extracting USB artifacts from systems like Windows 7, helping users understand how to identify potential threats from USB connections.
  1. cybercore

    Windows 7 Extracting USB Artifacts from Windows 7

    Link Removed - Invalid URL USBDeview - View all installed/connected USB devices on your systemView any installed/connected USB device on your system Link Removed The article discusses some of the artifacts that a USB storage device leaves on a system when it has been plugged in, how...
    • cybercore
    • Tutorial
    • data exfiltration event timing forensic examination forensics guid historical data malicious software malware network security ntuser.dat registry sensitive data setupapi.log storage devices usb analysis usb artifacts usb security usbdeview windows 7
    • Replies: 0
    • Forum: Windows Tutorials