USB registry key

[Faizan]

Dear All,

 

I want to know the registry key which has modify after usb device are attached

i want to use in SIEm solution for security purpose

Thanks

[Alan_B]

I suggest using Regshot.

 

Take one shot before plugging in a device the P.C. has not seen,

and another shot after,

and let it compare and show you all keys/values that have changed

[Faizan]

I suggest using Regshot.

 

Take one shot before plugging in a device the P.C. has not seen,

and another shot after,

and let it compare and show you all keys/values that have changed

 

you have any idea which key has change

[Andavari]

you have any idea which key has change

That's obviously the whole ideal behind his suggestion, which will allow you to know which key it is.

 

There's also the freeware NirSoft USBDeview which will show all USB devices registered.

[Alan_B]

Sorry but I am too busy to spend time with the tool I have recommended in order to track down a registry key on my system that may be totally different on your operating system.

I would encourage you to do and learn for yourself, then you can get instant answers.

Alternatively give Google a shot, e.g search for

USB FLASH REGISTRY KEY

 

Give a man a fish and you feed him for a day. Teach a man to fish and you feed him for a lifetime. Chinese Proverb