About this tag
The usb artifacts tag on WindowsForum.com covers topics related to forensic artifacts left by USB storage devices on Windows systems. Content includes methods for extracting and interpreting USB device connection history, such as using tools like USBDeview to view installed or connected USB devices. Discussions focus on how these artifacts can be used to determine if a USB device was involved in malicious activity on a Windows computer, highlighting the security challenges posed by portable USB drives. The tag is relevant for users interested in Windows forensics, incident response, and understanding the traces USB devices leave on a system.
  1. cybercore

    Windows 7 Extracting USB Artifacts from Windows 7

    Link Removed - Invalid URL USBDeview - View all installed/connected USB devices on your systemView any installed/connected USB device on your system Link Removed The article discusses some of the artifacts that a USB storage device leaves on a system when it has been plugged in, how...
    • cybercore
    • Tutorial
    • data exfiltration event timing forensic examination forensics guid historical data malicious software malware network security ntuser.dat registry sensitive data setupapi.log storage devices usb analysis usb artifacts usb security usbdeview windows 7
    • Replies: 0
    • Forum: Windows Tutorials