DFIRHub

USBDetective

Collects files that can be input into USB Detective for parsing

  • Compound
  • 76 paths from 7 artifacts
  • Per-user data
  • Version 1
  • Kevin Pagano

Paths on disk

76 paths from 7 targets

Paths use Windows environment variable syntax

Includes 5 targets

Each one is collected with this target

Notes

For more information on USB Detective go here: https://usbdetective.com/features/