Posts tagged "device-history"

• USB and device history from Amcache: InventoryDeviceContainer and InventoryDevicePnp

  Amcache's InventoryDeviceContainer and InventoryDevicePnp keys give analysts a clean answer to 'what hardware ever connected to this host?'. A practical guide to USB and peripheral investigations.

  2026-05-24