USB Connection History Analyzer

Digital forensics is an important field in cybersecurity that focuses on the identification, collection, preservation, analysis, and presentation of digital evidence. USB storage devices such as flash drives, pen drives, and external hard disks are commonly used for transferring and storing data. These devices are frequently involved in cybercrime investigations, data theft incidents, insider threats, and unauthorized data transfer activities. Therefore, identifying USB devices previously connected to a computer system is a significant task in digital forensic investigations.

Windows operating systems maintain records of connected USB devices within the Registry database. The USBSTOR Registry key stores information such as vendor name, product name, serial number, and device type. The proposed USB Connection History Analyzer automatically extracts USB device information from Registry entries and displays it through a web-based dashboard. The system is developed using Python, Flask, HTML, CSS, and the Winreg module. The extracted forensic information assists investigators in identifying removable storage devices connected to a computer system and supports forensic evidence collection. The developed tool provides an efficient, accurate, and user-friendly solution for USB forensic analysis.