USB Forensics — Recover More Volume Serial Numbers with the Windows 10 Partition/Diagnostic Event Log

Windows 10 introduced an event log of high value to digital forensic examiners and incident responders — especially when device attribution is required. Written for a technical audience, this blog shares the results of an analysis showing what can be stored in the log. Read the blog to gain insight into methodology, results and their relevance.

Read More...

Comments

Popular posts from this blog

Rainbow Six Siege Uses Azure to Deliver Immersive Multiplayer Games Globally

The Decision‑maker's Guide to Comprehensive Security

Get started with Microsoft Purview eDiscovery