USB Forensics — Recover More Volume Serial Numbers with the Windows 10 Partition/Diagnostic Event Log

Windows 10 introduced an event log of high value to digital forensic examiners and incident responders — especially when device attribution is required. Written for a technical audience, this blog shares the results of an analysis showing what can be stored in the log. Read the blog to gain insight into methodology, results and their relevance.

Read More...