Answer the question
In order to leave comments, you need to log in
How to find out if a file was copied to removable media in Windows?
1. There is a laptop on Windows.
2. There is a directory with files.
3. There are suspicions that the directory was copied to removable media, while no one sees.
The question is, is it possible to find out if this action was performed by any logs or journals?
Answer the question
In order to leave comments, you need to log in
There is no prior action. If you set up an access audit, then you can type it, but there will be a lot of garbage.
There are DLP programs, for example, Kaspersky, they monitor suspicious activities
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question