The Using USB Devices Theft Files Case Evidence Appraisal and Analysis
Ning Wang · Xinxi wangluo anquan · 2011
The article on the use of USB equipment(U disk file) theft case analysis and identification of the work,gives the analysis process and the identification of problems should be paid attention to,through the case of electronic evidence identification method,identification and identification on three aspects to carry on the discussion,and introduced the USB device descriptor determination of registry keys,USBStor analysis,USB equipment access system drive and the analysis of USB equipment access operating system originally time determination methods.The article for the current USB device of electronic evidence identification work has certain guiding significance.