External Storage Devices

Forensically Collecting Evidence from External Storage Devices

Analyzing external mass storage device activity on systems can provide an excellent source of evidence when our certified forensic investigators are assessing how storage devices were used and for what purpose.
Depending on the type of system, Lexbe forensic investigators can often uncover the following data points regarding external storage devices:

  • Associated User Account

  • Brand of Storage Device

  • Device Class ID

  • Device Volume

  • Model Number

  • Serial Number

  • Usage Date and Time

Behavioral Correlation

Lexbe’s forensic investigators will often utilize external storage device artifacts combined with other forensic artifacts, like cloud platform download data, to correlate behavioral data during an investigation. For example, a login and download from a cloud-based customer relationship management (CRM) platform that was subsequently transferred to the external storage device can be uncovered. This technique is highly effective in identifying data exfiltration via external storage device.

External Storage Device Variety

There are all types and sizes of external storage devices. As an example, Smartphones with TBs of storage can easily be connected to computers and provide external storage. Therefore, the Lexbe forensic team is equipped with the tools necessary to identify and collect external storage device activity.

Get a Complimentary Forensic Consult

If you have questions about digital forensic investigations involving external storage devices, or any other electronically stored information, we’d be happy to schedule a complimentary consult call.

"*" indicates required fields

Full Name*
This field is for validation purposes and should be left unchanged.

Schedule a Personal Demo, Price Quote, or Expert Consultation

To schedule a personal demo, get a price quote, or free consultation, please complete this form below and one of our expert sales professionals will contact you. If you prefer, you can contact us directly at 1-800-401-7809 x22 or at [email protected].

All contact information is kept confidential. View our privacy policy.