Notifications
Clear all
Topic starter
07/03/2011 10:17 pm
I m doing an analysis of a usb drive for an assignment at moment i m using prodiscover and Hxd Software for file format and i have a writeblocker as well . was just wondering is there any other useful tools i could be using as well
07/03/2011 10:30 pm
Well what are you trying to do; just what is the scope of your investigation?
08/03/2011 12:34 am
UVCView from Microsoft can get you the internal serial number that you will need to corroborate connection to a computer and drive letter assigned.
Also, try googling for 'usb key analysis'
Rob Lee from SANS has posted some steps to use to gather data from the computer about times it was connected first and last and how to figure out the drive letter and what user account was logged in when it was connected.