USBLogView is a *freeware that runs in the background and records all activities related to USB devices, such as the plugging and unplugging of any USB devices.
(*Freeware is software, most often proprietary, that is distributed at no monetary cost to the end user.)
How to download USBLogview?
Download by clicking on the above mentioned link and run the USBLogview Application.
The USBLogview UI
When you open USBLogview, this is what you'll see:
- 1Event type - If a USB device was plugged in or unplugged.
- 2Event time - The date and time when the event happened.
- 3Device name - The name of the USB Device.
- 4Description - Details/description for the USB Device.
- 5Device type - Type of device such as Storage, Bluetooth, Video, etc.
- 6Drive Letter - Specifies the drive letter of the USB device. This column is only relevant to USB flash memory devices and to USB CD/DVD drives.
- 7Serial number (for mass storage devices) - USB devices used for mass storage have unique serial numbers.
- 8VendorID (VID) - Unique ID of a vendor assigned by the USB Implementers Forum.
- 9ProductID (PID) - Unique ID of the product assigned by the vendor.
- 10Firmware Revision - The version of firmware on the device.
- 11*USB Class
- 12*USB Subclass
- 13*USB Protocol
*USB Class, subclass and protocol are codes to define the functionality of the USB device. The table below illustrates this:
Base Class |
SubClass |
Protocol |
Meaning |
01h |
xxh |
xxh |
Audio device |
0Eh |
xxh |
xxh |
Video device |
Uses of USBLogview.
USBLogView can be used to:
- Monitor access to USB ports
- Record details every time a USB device is either plugged into the computer or unplugged from the computer.
- Log information on USB devices that have been used on a computer over a period of time. These logs can go back weeks or even months.
Auditing USB activity with ADAudit Plus
✕
Native auditing becoming a little too much?
Try ADAudit Plus to audit, track, and respond to malicious activities happening inside your Windows AD & Azure environment.
Try ADAudit Plus for free