This program can correlate the dates of USB mass device connections with recent files and export a report in CSV format
ExamGurad is a portable Windows cyber-forensic tool that collects USB device history, event logs, and system activity evidence for academic integrity investigations.
Digital forensics investigation involving USB evidence, file signature analysis, and email examination in an intellectual property theft case.
Gives you the list of storage devices that has been connected to your windows machine
Safely inspect USB flash drives without exposing your computer. RP2350 acts as a hardware firewall — browse, preview, and scan files through a web app over serial.
USB device-history correlation engine — reconstructs USB connection history from every Windows artifact (registry, SetupAPI, event logs, LNK) plus macOS/Linux, and scores cross-source timestamp consistency by tamper-independence. Runs headless on any OS; pipeline-native JSONL, reproducible, panic-free.
Add a description, image, and links to the usb-forensics topic page so that developers can more easily learn about it.
To associate your repository with the usb-forensics topic, visit your repo's landing page and select "manage topics."