Solved

USB Flashdrive

Posted on 2012-03-20
13
207 Views
Last Modified: 2012-04-22
I would like to know if there is a way to tell when a USB Drive was plugged and unplugged from your computer. Is this in the event log somewhere? if it is what event id would it be? If it is elsewhere please advise.
0
Comment
Question by:devinngo
  • 5
  • 4
13 Comments
 
LVL 28

Accepted Solution

by:
Run5k earned 500 total points
ID: 37745683
The closest I have seen to that capability is what's provided by NirSoft's USBDeview utility:

http://www.nirsoft.net/utils/usb_devices_view.html
0
 

Author Comment

by:devinngo
ID: 37747093
Run5k,

I have tried using that, however, it only shows current day's activity. I need to go back a few months.

Thanks,
0
 
LVL 28

Expert Comment

by:Run5k
ID: 37747113
It may be a bit of a challenge to go back a few months, but hopefully someone else within the EE community can chime in accordingly.
0
 

Author Comment

by:devinngo
ID: 37747634
No problem, thank you for help.
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 

Author Comment

by:devinngo
ID: 37809572
I've requested that this question be deleted for the following reason:

na
0
 
LVL 28

Expert Comment

by:Run5k
ID: 37809573
While the author's frustration is understandable, it might be nice to have a bit more of an explanation for completely deleting the question than "na."
0
 
LVL 28

Assisted Solution

by:Run5k
Run5k earned 500 total points
ID: 37809576
Additionally, a co-worker recommended the following free utility that claims to go back as far as necessary:

http://www.intelliadmin.com/?p=4030
0
 

Author Comment

by:devinngo
ID: 37864229
I've requested that this question be deleted for the following reason:

na
0
 
LVL 28

Expert Comment

by:Run5k
ID: 37864230
Déjà vu?  Once again, it might be nice to have a bit more of an explanation for completely deleting the question than "na."

The two comments that I posted previously (http:#a37745683 and http:#a37809576) both seem to have merit.  At the very least, I think they deserve more consideration than an acronym provides.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

Recently Microsoft released a brand new function called CONCAT. It's supposed to replace its predecessor CONCATENATE. But how does it work? And what's new? In this article, we take a closer look at all of this - we even included an exercise file for…
In this article, I will show you HOW TO: Perform a Physical to Virtual (P2V) Conversion the easy way from a computer backup (image).
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now