Last Updated on November 17, 2023 by InfraExam
Which Windows registry hive would be used to track the history of USB storage devices?
- HKEY_LOCAL_MACHINE (HKLM)
- HKEY_CURRENT_USER (HKCU)
- HKEY_CLASSES_ROOT (HKCR)
- HKEY_CURRENT_CONFIG (HKCC)
|Explanation & Hint:
To track the history of USB storage devices on a Windows system, you would typically examine the Windows Registry under the HKEY_LOCAL_MACHINE (HKLM) hive. This is where information about hardware and system-wide configurations, including USB device history, is stored.
In particular, you can look into the