Notifications
Clear all

USBDeview

2 Posts
2 Users
0 Reactions
819 Views
(@bluedragon)
Trusted Member
Joined: 18 years ago
Posts: 60
Topic starter  

Anyone use USBDeview before to get the attached USB Devices in suspect drive?

I tried it but it does not seems to match what I saw in the registry.

Any comments?


   
Quote
(@mobileforensicswales)
Reputable Member
Joined: 17 years ago
Posts: 274
 

I've used USB deview before as part of research for my degree

If you use it in XP you will be fine, unfortunately if you are in Vista the new more detailed catagories of USB in the registry mess up its output.

The keys are actually very easy to manually read from the users PC using a registry viewer, if you go on to the usbdeview section of the nirsoft website it explains it there.


   
ReplyQuote
Share: