When a digital storage device is attached to a computer's usb port, does the computer store a date as to when the device was attached or just what was attached? I use Vista operating system. Can anyone tell me how to find where the infomration is stored on my Vista system?
in the registry, go to SYSTEM\ControlSet\ENUM\USBSTOR
look under each controlset. This will show you devices that have been attached.
When a digital storage device is attached to a computer's usb port, does the computer store a date as to when the device was attached or just what was attached? I use Vista operating system. Can anyone tell me how to find where the infomration is stored on my Vista system?
This is covered quite extensively in Windows Forensic Analysis, 2/e.
RebsQuest - This article may be helpful, too.