A
A
Aztart2021-06-07 20:19:07
Windows
Aztart, 2021-06-07 20:19:07

How to find out if a file was copied to removable media in Windows?

1. There is a laptop on Windows.
2. There is a directory with files.
3. There are suspicions that the directory was copied to removable media, while no one sees.

The question is, is it possible to find out if this action was performed by any logs or journals?

Answer the question

In order to leave comments, you need to log in

2 answer(s)
V
Vladimir Korotenko, 2021-06-07
@Aztart

There is no prior action. If you set up an access audit, then you can type it, but there will be a lot of garbage.
There are DLP programs, for example, Kaspersky, they monitor suspicious activities

A
Alexander, 2021-06-07
@shabelski89

you can at least look at the registry for connecting flash drives - approximately described here

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question