Monday, August 21, 2017

USB forensics with Logparser Studio

Pictures are worth a thousand words. Enjoy!!!!

HKLM\SYSTEM\CurrentControlSet\Enum\USBSTOR






























HKLM\SYSTEM\CurrentControlSet\Enum\USB






























HKLM\SYSTEM\MountedDevices

No comments:

Post a Comment