1
I think I have just lost a USB stick. Is there a way to view all the file transfers made from a PC to the external drive, so I can double check everything that was on the drive? Very unlikely, but there are important files that could have been on it.
Does the event viewer log these type of events?
Any help would be appreciated, think I'll stick to cloud storage from now on...
Joe
Posted 2013-05-15T20:26:17.333
Reputation: 19
0
Does the event viewer log these type of events?
Nope.
If the Event Log logged every file transfer in the system, it'd be full pretty quickly. :)
Can it be set up? Yes, but not without 3rd party software (or some fancy programming/scripting of your own) that monitors for those (specific) file actions/events.
Related SU question: Can a file transfer to a USB pen drive be tracked in windows 7?
Ƭᴇcʜιᴇ007
Posted 2013-05-15T20:26:17.333
Reputation: 103 763
Thanks for the feedback, if its one file in particular is there a way to view any changes/events of that file? Sorry for the repitition. – Joe – 2013-05-15T20:52:35.600
On the properties of the file mentioned, the modified and accessed dates of the file are the same as the date it was created, does this mean anything in relation to trasnfer? Thanks – Joe – 2013-05-15T20:54:04.763
Doesn't look like it. I just tried (from SU question How can I display the time stamp of a file with seconds, from the command line?)) Get-ChildItem akf.txt -Force | Select-Object FullName, CreationTime, LastAccessTime, LastWriteTime That shows all of that file's time. Then I copied the file as akf2 and ran that command on akf2.txt. Looking at the source file,the access time didn't change to the creation and access time of the copied file.Another thing I looked at is the archive bit(which can b turned off from a copy) but that happens with cmd's xcopy /m not with windows gui copy or cmd copy – barlop – 2013-05-15T21:07:42.213
With respect to your comment on cloud storage: from a security point of view, if you encrypted your flash drive it would be a lot more secure than anything sent into "the cloud." – Moses – 2013-05-15T20:29:37.003
Its funny, because that also popped into my head as soon as i realised what happened.. But i am 99.99% sure everthiny on it was pretty much useless would be nice to check for peace of mind though. I have definitely learnt my lesson though! Novice mistake! – Joe – 2013-05-15T20:31:13.167