How to find missing...
 
Notifications
Clear all

How to find missing USB Records?

1 Posts
1 Users
0 Reactions
1,603 Views
(@pieces0310)
Joined: 12 years ago
Posts: 237
Topic starter   [#15992]

In my previously article "EnCase missed some USB activities in the evidence files", I mentioned about that EnCase could only "see" few USB records. Actually not only EnCase may not see all USB records, some other forensic tools got the same problems.

What else could help us to find the missing USB Records? You guys could take a look at my blog as below
http//www.cnblogs.com/pieces0310/p/7729327.html



   
Quote
Share: