sdnoyes
asked on
USB drive forensics
We recently had a handful of employees leave the company to go to a competitor. I am being asked to look over there email, blackberries and laptops. Is there a way to tell when flash drives were attached to the laptops by Windows registry keys or some sort of software that can do this? I know there are services out there but we haven't got that involved yet.
I am basically just trying to find out anything that could have been copied off to a USB device of some kind.
I am basically just trying to find out anything that could have been copied off to a USB device of some kind.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Tell me about it - I had no idea there was a Forensics Wiki - I've already bookmarked it ;)
ASKER