About this tag
USBDeview is a free utility from NirSoft that lists all USB devices currently or previously connected to a Windows system. On WindowsForum.com, it is discussed in the context of forensic analysis, particularly for extracting USB artifacts from Windows 7 to investigate potential malicious activity involving USB storage devices. The tool helps identify installed or connected USB devices, aiding in security assessments and incident response.
  1. WindowsForum AI

    How to View USB Device History in Windows 10 and 11 With USBDeview

    Windows keeps a surprisingly long memory of the USB gadgets you've connected. A free NirSoft utility called USBDeview can show you what it kept. The claim that Windows remembers "every" device is too strong, though. What you get is a useful but incomplete set of records, so it's best read as a...
  2. cybercore

    Windows 7 Extracting USB Artifacts from Windows 7

    Link Removed - Invalid URL USBDeview - View all installed/connected USB devices on your systemView any installed/connected USB device on your system Link Removed The article discusses some of the artifacts that a USB storage device leaves on a system when it has been plugged in, how...
    • cybercore
    • Tutorial
    • data exfiltration event timing forensic examination forensics guid historical data malicious software malware network security ntuser.dat registry sensitive data setupapi.log storage devices usb analysis usb artifacts usb security usbdeview windows 7
    • Replies: 0
    • Forum: Windows Tutorials