USB Forensics — Recover More Volume Serial Numbers with the Windows 10 Partition/Diagnostic Event Log

Windows 10 introduced an event log of high value to digital forensic examiners and incident responders — especially when device attribution is required. Written for a technical audience, this blog shares the results of an analysis showing what can be stored in the log. Read the blog to gain insight into methodology, results and their relevance.

View In New Tab

USB Forensics — Recover More Volume Serial Numbers with the Windows 10 Partition/Diagnostic Event Log published by Incipient Corp.

Home
Contact Us
Fair Use
The material on this site is provided for educational and informational purposes. All photos that haven't been taken by us have either been purchased, used with permission, credited and linked back to their original sources or believed to be public domain. It is believed that this constitutes a `fair use` of any such copyrighted material as provided for in section 107 of the US Copyright Law. In accordance with Title 17 U.S.C. Section 107, the material on this site is distributed without profit to those who have an interest in using the included information for research and educational purposes. If you wish to use copyrighted material from this site for purposes of your own that go beyond `fair use`, you must obtain permission from the copyright owner.

The full experience is only one step away!

Incipient Corporation is ready to help!

Please confirm your email address!

USB Forensics — Recover More Volume Serial Numbers with the Windows 10 Partition/Diagnostic Event Log