USB Forensics — Recover More Volume Serial Numbers with the Windows 10 Partition/Diagnostic Event Log

Windows 10 introduced a new event log valuable to digital forensic examiners and incident responders. What should you take away from the results? Written for a technical audience, this blog walks you through the methodology and what it means.

Windows 10 introduced an event log of high value to digital forensic examiners and incident responders — especially when device attribution is required. Written for a technical audience, this blog shares the results of an analysis showing what can be stored in the log. Read the blog to gain insight into methodology, results and their relevance.

Read More…