The views expressed in this blog are those of the owner and do not reflect the views or opinions of the owner’s employer. All content provided on this blog is for informational purposes only. The owner of this blog makes no representations as to the accuracy or completeness of any information on this site or found by following any link on this site. The owner will not be liable for any errors or omissions in this information nor for the availability of this information. The owner will not be liable for any losses, injuries, or damages from the display or use of this information. This policy is subject to change at any time. The owner is not an attorney, and nothing posted on this site should be construed as legal advice. Litigation Support Tip of the Night does not provide confirmation that any e-discovery technique or conduct is compliant with legal, regulatory, contractual or ethical requirements.
In the Registry Editor in Windows 7, you can find detailed information on devices connected to the USB ports of a PC under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR\
Subfolders will use the serial numbers of the USB devices, and the 'FriendlyName' field will show the brand name of the devices connected to the PC.
NIST's National Software Reference Library makes available a Unique File Corpus of each file that it processes. The tab delimited file lists the SHA1 hash value and byte count of each file. It is available for download here.
If you're conducting electronic discovery and find unknown files and want to determine if they may contain data unique to a business's network consulting the corpus is one way to 'de-NIST' the data.
The full NSLR Reference Data Set contains far more information for each file, including the CRC32 checksum: the MD5 hash value; manufacturer, operating system, and product codes, names, and versions; language; application type; and the file name. Whereas the full set downloads as an .iso file, the Unique File Corpus downloads as a single file named, 'CorpIdMetadata.tab' in a zip file.
The tab format can be handled by MS Access. I was able to successfully import the first 1,048,576 rows into an Excel spreadsheet tonight. Take a look:
The program CCleaner is widely relied upon to delete unwanted files (such as internet .tmp files), and can also be used to overwrite unwanted files that you want to permanently delete.
Beware that version 5.45 and later of CCleaner may be sending user data to Avast the developer of CCLeaner.. See the particle posted here.
As reported by ZDNet, CCleaner sends user data back to Avast's servers. The CCleaner claims that it does not collect personal identifiable information but only uses anonymous usage data.