USB Threat Evaluation - Detection and Reporting System
USB Total Inserts by User ID Report
Date Range: 23-Apr-2007 - 28-Apr-2007
Group: NextSysSecure, Inc							Run Date: Apr 28, 2007
User Name	System Name	Network Address	Session ID	Time	Device Type
AlCapone	COMPUTER2	192.168.0.100	1158084665	2007-04-24 10:12:44	Event#(1) : A USB Removable Storage Device ( Vendor: Lexar Media Inc. , ProductID: 41984, SN: 1069A305054145280905 , Port#: 3) was Inserted as Drive F:
AlCapone	COMPUTER2	192.168.0.100	1158085112	2007-04-24 15:11:21	Event#(1) : A USB Removable Storage Device ( Vendor: Apple Computer , ProductID: 4618, SN: 000A270012950528 , Port#: 5) was Inserted as Drive G:
AlCapone	COMPUTER2	192.168.0.100	1158085455	2007-04-27 15:37:55	Event#(1) : A USB Removable Storage Device ( Vendor: Lexar Media Inc. , ProductID: 41984, SN: 1069A305054145280905 , Port#: 3) was Inserted as Drive F:
AlCapone	COMPUTER2	192.168.0.100	1158086578	2007-04-28 11:38:24	Event#(1) : A USB Removable Storage Device ( Vendor: Lexar Media Inc. , ProductID: 41984, SN: 1069A305054145280905 , Port#: 3) was Inserted as Drive F:
AlCapone	COMPUTER2	192.168.0.100	1158086885	2007-04-28 14:56:44	Event#(1) : A USB Removable Storage Device ( Vendor: Apple Computer , ProductID: 4618, SN: 000A270012950528 , Port#: 5) was Inserted as Drive G:
						Total Inserts for User "AlCapone" = 5
User Name	System Name	Network Address	Session ID	Time	Device Type
Tom Jones	COMPUTER3	192.168.0.100	1158082552	2007-04-25 11:45:40	Event#(1) : A USB Removable Storage Device ( Vendor: SanDisk Corporation , ProductID: 21510, SN: 000017E48A61B1C6 , Port#: 6) was Inserted as Drive G:
Tom Jones	COMPUTER3	192.168.0.100	1158084111	2007-04-26 09:33:44	Event#(1) : A USB Removable Storage Device ( Vendor: SanDisk Corporation , ProductID: 21510, SN: 000017E48A61B1C6 , Port#: 6) was Inserted as Drive G:
Tom Jones	COMPUTER3	192.168.0.100	1158085227	2007-04-27 15:37:55	Event#(1) : A USB Removable Storage Device ( Vendor: Memorex, Inc. - U3 , ProductID: 22, SN: 0CB11160913398ED , Port#: 4) was Inserted as Drive K:
						Total Inserts for User "Tom Jones" = 3
		The Total Inserts by User ID Report displays all USB Mass Storage Device Insertions for All User or a single Selected User that occurred during an selected period of time.  It is another forensic type report that can detail the exact characteristics of typical USB Activity.