Link to home
Start Free TrialLog in
Avatar of sdnoyes
sdnoyes

asked on

USB drive forensics

We recently had a handful of employees leave the company to go to a competitor.  I am being asked to look over there email, blackberries and laptops.  Is there a way to tell when flash drives were attached to the laptops by Windows registry keys or some sort of software that can do this?  I know there are services out there but we haven't got that involved yet.

I am basically just trying to find out anything that could have been copied off to a USB device of some kind.
ASKER CERTIFIED SOLUTION
Avatar of rgautier
rgautier
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of sdnoyes
sdnoyes

ASKER

Many thanks, who knew Wiki had all the answers.  I appreciate the quick help this is exactly what I needed.
Tell me about it - I had no idea there was a Forensics Wiki - I've already bookmarked it ;)