Dec. 14, 2022, 4:01 a.m. | /u/Past_Programmer

Computer Forensics www.reddit.com

Right now it looks like the user is just copying data from Computer A to the USB drive. However, I think the the user is copying data to a non-company computer and returning the USB drive. How can we prove data was copied from the USB drive to another computer? Thanks.

computer computerforensics connect copy data drive return usb usb drive

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

Information Security Engineers

@ D. E. Shaw Research | New York City

Cyber Security Architect - SR

@ ERCOT | Taylor, TX

SOC Analyst

@ Wix | Tel Aviv, Israel

Associate Director, SIEM & Detection Engineering(remote)

@ Humana | Remote US

Senior DevSecOps Architect

@ Computacenter | Birmingham, GB, B37 7YS