About this tag
USBDeview is a free utility from NirSoft that lists all USB devices currently or previously connected to a Windows system. On WindowsForum.com, it is discussed in the context of forensic analysis, particularly for extracting USB artifacts from Windows 7 to investigate potential malicious activity involving USB storage devices. The tool helps identify installed or connected USB devices, aiding in security assessments and incident response.
  1. cybercore

    Windows 7 Extracting USB Artifacts from Windows 7

    Link Removed - Invalid URL USBDeview - View all installed/connected USB devices on your systemView any installed/connected USB device on your system Link Removed The article discusses some of the artifacts that a USB storage device leaves on a system when it has been plugged in, how...
    • cybercore
    • Tutorial
    • data exfiltration event timing forensic examination forensics guid historical data malicious software malware network security ntuser.dat registry sensitive data setupapi.log storage devices usb analysis usb artifacts usb security usbdeview windows 7
    • Replies: 0
    • Forum: Windows Tutorials