usbrip
usbrip is a forensic tool with a command-line interface that allows tracking artifacts left by USB devices. It is written in Python3. It analyzes logs to create event tables, which may contain the following information: date and time of device connection, user, vendor ID, product ID, and more. Additionally, the tool can: export collected information as a JSON dump; generate a list of authorized […]
