The View From NCS Technologies

USB Forensics — Recover More Volume Serial Numbers with the Windows 10 Partition/Diagnostic Event Log

Posted by Mike Turicchi on Mar 14, 2023 12:24:25 PM

Windows 10 introduced an event log of high value to digital forensic examiners and incident responders — especially when device attribution is required. Written for a technical audience, this blog shares the results of an analysis showing what can be stored in the log. Read the blog to gain insight into methodology, results and their relevance.

Read More...