Search research articles

ABOUT JoVE

Overview Leadership Blog JoVE Help Center

AUTHORS

Publishing Process Editorial Board Scope & Policies Peer Review FAQ Submit

LIBRARIANS

Testimonials Subscriptions Access Resources Library Advisory Board FAQ

RESEARCH

JoVE Journal Methods Collections JoVE Encyclopedia of Experiments Archive

EDUCATION

JoVE Core JoVE Business JoVE Science Education JoVE Lab Manual Faculty Resource Center Faculty Site

Terms & Conditions of Use

Related Concept Videos

You might also read

Related Articles

Articles linked to this work by shared authors, journal, and citation graph.

Sort by

Same author

Comparing intraosseous versus intravenous access for resuscitation in out-of-hospital cardiac arrest: A systematic review and GRADE meta-analysis.

Medicine·2026

Same author

Efficacy and Safety of Cerebrolysin as an Adjunct to Mechanical Thrombectomy in Acute Ischemic Stroke: A Systematic Review and Meta-Analysis of Observational Studies.

Brain and behavior·2026

Same author

Post-quantum cryptographic authentication protocol for industrial IoT using lattice-based cryptography.

Scientific reports·2026

Same author

Intensive versus standard blood pressure management after endovascular therapy in acute ischemic stroke: a systematic review and meta-analysis.

Annals of medicine and surgery (2012)·2026

Same author

Combined effects of restorative and compensatory rehabilitation training on executive functions in stroke with mild cognitive impairment.

Disability and rehabilitation·2026

Same author

Use of a single-scan Lung-RADS for pulmonary nodule assessment in resource-limited clinical settings.

Current problems in diagnostic radiology·2026

Same journal

Commentary on: Maskell PD, de Korompay A. Letter to the Editor-The transition point from zero-order to first order in blood alcohol elimination curves. Where is it? J Forensic Sci. 2025;70 (1):398-400. https://doi.org/10.1111/1556-4029.15650.

Journal of forensic sciences·2026

Same journal

A novel relationship between time offsets in capillary electrophoresis and DNA sequence variations in short tandem repeats.

Journal of forensic sciences·2026

Same journal

A 4-zone model to determine fentanyl overdose probability.

Journal of forensic sciences·2026

Same journal

Authors' response.

Journal of forensic sciences·2026

Same journal

Determining the utility of radio frequency identification (RFID) technology for disaster victim identification (DVI).

Journal of forensic sciences·2026

Same journal

Stakeholders' perspectives on integrating point-of-care diagnostics into forensic death investigations in South Africa.

Journal of forensic sciences·2026

See all related articles

Search research articles

Related Experiment Video

Updated: Feb 26, 2026

Assessment of Ultrasonic Vocalizations During Drug Self-administration in Rats

Assessment of Ultrasonic Vocalizations During Drug Self-administration in Rats

Published on: July 22, 2010

USB Storage Device Forensics for Windows 10.

Ayesha Arshad¹, Waseem Iqbal¹, Haider Abbas²

¹National University of Sciences and Technology (NUST), Islamabad, 44000, Pakistan.

Journal of Forensic Sciences

|July 19, 2017

Summary

This summary is machine-generated.

This study tracks USB device usage in Windows by analyzing registry and event logs. Findings reveal significant differences in tracking capabilities between Windows 7 and Windows 10, aiding digital forensics.

Keywords:

Microsoft event log Registry USB forensics investigation USB storage device Windows 10 forensics forensic science

More Related Videos

Author Spotlight: Automated Deep Brain Stimulation for Parkinson's Disease - Exploring the Possibilities and Challenges of Home Monitoring

Author Spotlight: Automated Deep Brain Stimulation for Parkinson's Disease - Exploring the Possibilities and Challenges of Home Monitoring

Published on: July 14, 2023

A Detailed Protocol for Perspiration Monitoring Using a Novel, Small, Wireless Device

A Detailed Protocol for Perspiration Monitoring Using a Novel, Small, Wireless Device

Published on: November 24, 2016

Related Experiment Videos

Last Updated: Feb 26, 2026

Assessment of Ultrasonic Vocalizations During Drug Self-administration in Rats

Assessment of Ultrasonic Vocalizations During Drug Self-administration in Rats

Published on: July 22, 2010

Author Spotlight: Automated Deep Brain Stimulation for Parkinson's Disease - Exploring the Possibilities and Challenges of Home Monitoring

Author Spotlight: Automated Deep Brain Stimulation for Parkinson's Disease - Exploring the Possibilities and Challenges of Home Monitoring

Published on: July 14, 2023

A Detailed Protocol for Perspiration Monitoring Using a Novel, Small, Wireless Device

A Detailed Protocol for Perspiration Monitoring Using a Novel, Small, Wireless Device

Published on: November 24, 2016

Area of Science:

Digital Forensics
Computer Science
Cybersecurity

Background:

Universal Serial Bus (USB) devices are widely used for data transfer and storage.
Their portability and ease of use present significant data theft risks for individuals and organizations.
Investigating data theft requires digital forensic artifacts such as device, date, and time information.

Purpose of the Study:

To analyze registry and log data for tracking USB device insertion and removal.
To compare USB tracking capabilities across different Microsoft Windows versions, specifically Windows 7, 8, and 10.
To identify evidentiary information for digital forensics investigations.

Main Methods:

Collected three sets of registry and log data: before, during, and after USB device insertion.
Analyzed Windows Registry and Event Logs for USB device artifacts.
Compared data from Windows 7, Windows 8, and Windows 10 systems.

Main Results:

Identified specific registry keys and event log entries related to USB device activity.
Found minimal differences in USB tracking between Windows 8 and Windows 10.
Observed significant variances in USB tracking artifacts between Windows 7 and Windows 10.

Conclusions:

Registry and log analysis provides valuable data for USB device forensics.
Windows 10 offers improved, though subtly different, USB tracking compared to Windows 8.
Significant upgrades in USB device tracking are evident when comparing Windows 7 to Windows 10, enhancing forensic capabilities.