Currently working an investigation that is related to external media (usb devices cdroms etc). I have two questions if i might. First when autoplay scans the filesystem on the media and you can see all the file names and folder names scrole by really quickly, is this information being logged anywhere within the O/S?
Second question Does the windows indexing service that can be used to speed up searches for files within windows also index external media if it is plugged in log enough? If so, where is that index located and has anyone had any experience with it?
Christian….
In answering your second question
Are you referring to Windows Desktop Search? If so, the default location of the WDS index is
\Documents and Settings\*USER*\Local Settings\Application Data\Microsoft\Desktop Search\
Currently working an investigation that is related to external media (usb devices cdroms etc). I have two questions if i might. First when autoplay scans the filesystem on the media and you can see all the file names and folder names scrole by really quickly, is this information being logged anywhere within the O/S?
Not that I've seen, but it's relatively easy to test…snapshot the file system and Registry, plug a device in and let it run, snapshot again and do a 'diff'.
Second question Does the windows indexing service that can be used to speed up searches for files within windows also index external media if it is plugged in log enough? If so, where is that index located and has anyone had any experience with it?
I'm assuming you're referring to the Windows service known as the "Indexing Service"…is this correct?
If so, here's some places to start reading
http//
http//
Beyond that, testing yourself might be the only way to determine this…
HTH,
Harlan
Thanks guys, I am talking about the indexing service that can be optionaly turned on. It is for the purpose of speeding up your searches. The windows desktop search if i remember correctly is a Microsoft version of Google desktop. The person in this case does not have that installed that I can tell.
I will check out the links and do some testing as suggested.
Thanks alot.
christian…