Remerciez-le!

Remerciez @Admin pour avoir partagé cet document gratuitement, de la manière la plus simple, en partageant sur les réseaux sociaux.

Profile windows xp usb keys thumbdrives 1

Pro ?le Windows XP USB Keys Thumbdrives XP USB KEY Thumbdrive Write Down Vendor Product Version SYSTEM CurrentControlSet Enum USBSTOR Vendor Product Version Write Down Serial Numbers SYSTEM CurrentControlSet Enum USBSTOR Serial Number Determine Parent Pre ?x ID SYSTEM CurrentControlSet Enum USBSTOR Parent Pre ?x ID Determine Vendor ? ID VID and Product ? PID SYSTEM CurrentControlSet Enum USB - VID XXXX Perform search for S N PID YYYY Determine Drive Letter Device Mapped To SYSTEM MountedDevices- Perform search for Drive Parent Pre ?x ID in the Drive Letter Write Down Volume GUIDs SYSTEM MountedDevices- Perform Search for GUID Parent Pre ?x ID in the GUIDs Find User That Used The Speci ?c USB Device NTUSER DAT Software Microsoft Windows User CurrentVersion Explorer MountPoints - Search for Device GUID Discover First Time Device Connected C Windows setupapi log ? Perform search Time Timezone for Serial Number Determine First Time Device Connected After Last Reboot SYSTEM CurrentControlSet Control Devic Time Timezone eClasses f -b bf- d - f - a c efb b - Perform search for S N or SYSTEM CurrentControlSet Enum USB VIDXXXX PIDYYYY - Perform search for Serial Number Last Written Time of Serial Number Key Determine Last Time Device Connected NTUSER Software Microsoft Windows Cur Time Timezone rentVersion Explorer MountPoints GUI D - Perform search for Device GUID http forensics sans org http twitter com sansforensics CPro ?le VISTA USB Key Thumbdrives VISTA USB KEY ThumbdriveWrite Down Vendor Product Version SYSTEM CurrentControlSet Enum USBSTOR Vendor Product Version Write Down Serial Numbers SYSTEM CurrentControlSet Enum USBSTOR Serial Number Determine Vendor ? ID VID and Product ? PID SYSTEM CurrentControlSet Enum USB - VID XXXX Perform search for S N PID YYYY Write Down Volume GUIDs SYSTEM MountedDevices- Perform Search for GUID Serial Number Determine Drive Letter and Volume Name Device Mapped To SOFTWARE Microsoft Windows Portable Drive Letter Devices Devices- Perform Search for Serial Volume Name Number and Match with Volume Name Find User That Used The Speci ?c USB Device NTUSER DAT Software Microsoft Windows C User urrentVersion Explorer MountPoints - Search for Device GUID Discover First Time Device Connected C Windows inf setupapi dev log ? Perform Time Timezone search for Serial Number Determine First Time Device Connected After Last Reboot SYSTEM CurrentControlSet Enum USBSTOR Time Timezone VendorProductVersion - Perform search for Serial Number Last Written Time of Serial Number Key or SYSTEM CurrentControlSet Control Device Classes f - b bf- d - f - a c efb b - Perform search for S N Last Written Time of Key that has Serial Number and Vendor Product Revision Determine Last Time Device Connected SYSTEM CurrentControlSet Enum USB Time Timezone VIDXXXX PIDYYYY - Perform search for Serial Number Last Written Time of Serial Number Key or NTUSER Software Microsoft Windows Curr entVersion Explorer MountPoints GUID - Perform search for Device GUID http forensics sans org http twitter com sansforensics CPro ?le Windows USB Keys Thumbdrives Win USB Key Thumbdrive Write Down Vendor Product Version SYSTEM CurrentControlSet Enum