4Discovery USB Historian

55

DFIR Tools

Developer
License Type
Free
Forensic Utilities - Misc
USB
"The Microsoft Windows operating systems records artifacts when USB removable storage devices (thumb drives, iPods, digital cameras, external HDD, etc.) are connected. These artifacts can be found in Plug and Play (PnP) log files as well as the Windows Registry." www.4discovery.com

User comments

There are no user comments for this listing.