USB Artifacts

Jump to bottom

BenWare-FED edited this page Apr 16, 2025 · 1 revision

At least 7 locations in Windows Registry

C:\Windows\INF\Setupapi log file

At least 3 different Windows Event logs

LNK and Jumplists