> For the complete documentation index, see [llms.txt](https://windows.dfirhandbook.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://windows.dfirhandbook.com/windows-artifacts/usb-usage.md).

# USB Usage

- [Key Identification](https://windows.dfirhandbook.com/windows-artifacts/usb-usage/key-identification.md)
- [Drive Letter and Volume Name](https://windows.dfirhandbook.com/windows-artifacts/usb-usage/drive-letter-and-volume-name.md)
- [Connection Timestamps](https://windows.dfirhandbook.com/windows-artifacts/usb-usage/connection-timestamps.md)
- [User](https://windows.dfirhandbook.com/windows-artifacts/usb-usage/user.md)
- [Volume Name](https://windows.dfirhandbook.com/windows-artifacts/usb-usage/volume-name.md)
- [Plug & Play Event Log](https://windows.dfirhandbook.com/windows-artifacts/usb-usage/plug-and-play-event-log.md)