Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.

Windows 7: Identify data theft via USB memory stick?

13 Dec 2016   #1
Bunny G

Windows 7 Ultimate 32 bit
Identify data theft via USB memory stick?

I have an associate who owns a smallish business with an equally smallish network.

A problem has arisen in that a member of his staff has "lost" some important and sensitive data from their networked PC.

We have analysed the hard drive & that of the shared Server and "recovered" deleted or otherwise "lost" files which appears to have worked inasmuch that we obtained data which had been deleted over a considerable period of time before and after the "lost" data was created, yet there is no sign whatsoever of the lost data.

There is a suspicion (but only a suspicion) that this particular staff member just might have saved these files to a USB stick, rather than the hard drive or Server and I am wondering if (and if so, how difficult is it) evidence can be obtained which would show the date and time a USB drive has been employed and (even better) whether such might detail the contents (or at least the filenames and types) of data that was saved in this way?

Would Windows event viewer reveal any or all of this and how would we go about isolating USB drive activity etc., through this means, if so?

Any advice, please? :)

My System SpecsSystem Spec
17 Dec 2016   #2

windows 7 ultimate x64

Would Windows event viewer reveal any or all of this
how would we go about isolating USB drive activity
THIS might help you find out which USB devices have been used on the computer and when, but not if files were read from the usb or written to the usb. But other than that, if you didn't have logging enabled on that computer and since the files are not there for you to check access time/modification time etc you are pretty much stuck.
My System SpecsSystem Spec

 Identify data theft via USB memory stick?

Thread Tools

Similar help and support threads
Thread Forum
1GB memory stick appears corrupt. Any data recovery options?
I have an older 1gb usb thumb drive that I used to transport data to and from home and work. This morning when I plugged it into the PC it came up like it was installing drivers for the device, and said it failed to install almost immediately. I thought this was strange, so I removed it and...
Backup and Restore
Free software for prevention of data theft
Hello! I'm looking for a software which asks for a password when some one tries to copy files from my computer to a pen drive or cd or upload to the internet. In other words I want a data theft protection software. I know that even if I install such a software there are ways to get around it,...

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 19:23.
Twitter Facebook Google+