usb#
$ target-query <path/to/target> -f usb
Module |
|
Output |
|
Module documentation
USB plugin.
Function documentation
Return information about attached USB devices.
Use the registry to find information about USB devices that have been attached to the system, for example the HKLMSYSTEMCurrentControlSetEnumUSBSTOR registry key.
- Yields UsbRegistryRecord with fields:
hostname (string): The target hostname domain (string): The target domain type (string): Type of USB device serial (string): Serial number of USB storage device vid (string): Vendor ID of USB storage device pid (string): Product ID of the USB storage device rev (string): Version of the USB storage device containerid (string): friendlyname (string): Display name of the USB storage device first_insert (datetime): First insertion date of USB storage device first_install (datetime): First instalation date of USB storage device last_insert (datetime): Most recent insertion (arrival) date of USB storage device last_removal (datetime): Most recent removal (unplug) date of USB storage device info_origin (string): Location of info present in output