Surviving Digital Forensics: Resolving Attached USBs

A forensic guide for linking USB activity to Windows computer systems

4.55 (523 reviews)

Udemy

platform

English

language

Network & Security

What you will learn

Learn to find information about attached USB devices on Windows 7 & Windows 8 systems

Learn how to tie a specific User account to USB activity

Learn to identify when USB devices were first and last attached to the system

Learn how to discover the volume name and assigned drive letter of attached USB devices

Learn how to extract data that will identify the make and model of attached USB devices

Learn to do all of this using freely available computer forensic tools

Why take this course?

Have you ever been asked to find out what the "F" drive is? Have you ever needed to prove a USB drive was attached to a target system? Collecting and presenting this information is a core skill all computer forensic analysts need know. If you have ever struggled with this then this class is for you. This course breaks down the process of collecting and interpreting the data necessary to make the connection between USB device and Windows systems.

Using all freely available tools, this course walks you through the process of identifying USB devices that have been attached to a system and shows you how to determine the times they were attached, what the volume names are, what the assigned drive letters were and which user mounted the USB volumes - all of this in about an hour.

Screenshots

Surviving Digital Forensics: Resolving Attached USBs - Screenshot_01

Surviving Digital Forensics: Resolving Attached USBs - Screenshot_02

Surviving Digital Forensics: Resolving Attached USBs - Screenshot_03

Surviving Digital Forensics: Resolving Attached USBs - Screenshot_04

Reviews

Angel

August 9, 2023

It's a very nice little course for starting in the basics of USB investigation. Clearly explained and to the point.

Douglas

December 2, 2022

Great course; very practical examples and labs that reinforced the material presented. Would definitely recommend this to my friends!

Michael

April 6, 2022

This was a great course. I appreciated the straight forward approach to digging out all of the information from various sources.

Robyn

August 19, 2021

Really enjoyed this course and got a lot out of it. Ordinarily I use forensic tools which can extract a lot of this information, so understanding where the raw information is coming from will be a huge benefit to me. Thanks!

Emory

August 15, 2021

I have been doing computer forensics for many years and always looking for new and refresher training. This was a great review for me and the content was presented very well with files to go with the training. I look forward to more from Sumuri as I have known them for many years. Great Job!

Edson

April 18, 2021

The NTUSER.DAT file was not in the downloaded media. In the quiz Q2, the path wasn't complete. Sometimes the last written time was confused due to the correction in the Q&A

Subhasish

September 1, 2020

Yes definitely, I eager to go deep in to the course and learn things about how these all stuffs work.

Lock

April 27, 2020

Yes, it really good course and it will help in my work. Only problem is the video resolution, most of the time I cannot see clearly what is on the screen. Also I was hoping to learn on Windows 10, this is not really updated as it is still on Windows 7 and 8.

Jonathan

April 27, 2017

Lovely course - delivers the specific information it is meant to deliver. However, for such a short course there's some fluff that can be removed: the "how to study this course" is irrelevant for one-hour-long course, and the Intro music at the beginning of every lesson is both too long and goes over the instructor's voice. For such a concise course, I'd expect a little deeper explanation of registry forensics (at least discussing the format of the registry on-disk so the concept of timestamping registry keys isn't lost).

Larry

August 2, 2016

THe constant zooming in and out is unnecessary and distracting. But, the class is a great class. Good job

Eugene

June 3, 2015

This course is concise, and expertly taught, a great class to learn new analysis methods or brush up on the latest information. I plan on taking every class Sumuri and Michael Leclair put out.

Charts

Price

Rating

Enrollment distribution

Surviving Digital Forensics: Resolving Attached USBs - Distribution chart