🖥️
Windows DFIR
Ctrl
k
Copy
Windows Artifacts
USB Usage
Key Identification
Drive Letter and Volume Name
Connection Timestamps
User
Volume Name
Plug & Play Event Log
Previous
Event ID 8193: Volume Shadow Copy Service Error
Next
Key Identification
Last updated
1 year ago
Was this helpful?
