SD card forensics

General (Technical, Procedural, Software, Hardware etc.)

Last Post by deeFIR 5 years ago

3 Posts

3 Users

0 Reactions

2,887 Views

RSS

Ross.Thomas1

(@ross-thomas1)

New Member

Joined: 5 years ago

Posts: 1

Topic starter 30/09/2019 8:12 am

I'm currently looking to establish a connection between a laptop and a series of Micro SD cards.

The laptop in question has a standard SD card slot, which I think was used to connect the Micro SD cards using an SD card to Micro SD card adaptor.

Am I likely to get to get anything in the registry indicating that Micro SD card has been inserted into the device?

I have a .LNK file on the laptop which circumstantially matches a file found on the Micro SD card but I want to concrete each Micro SD card as being inserted to the laptop.

Ross

Quote

Bunnysniper

(@bunnysniper)

Reputable Member

Joined: 12 years ago

Posts: 259

30/09/2019 9:21 am

Am I likely to get to get anything in the registry indicating that Micro SD card has been inserted into the device?

Try Regripper. And SD cards and USB drives are very often managed by the same controller. So you can use a lot of USB forensic tools which give you the serial number of the device as well. The registry is FULL with evidence of connected devices and mounted network drives.

regards, Robin

ReplyQuote