I’m using Autopsy for the first time for a class and one of the questions on my assignment is asking me to find any files containing proof of a thumb drive. Where can I find the thumb drive? Thank you in advance!
Look for artifacts that a thumb drive was present, ie: files that were on the thumb drive or registry entries.