USB Threat Evaluation - Detection and Reporting System
USB Session Report for Session 1158086578
Vendor: Lexar Media Inc. , ProductID: 41984, SN: 1069A305054145280905 , Port#: 3
							Run Date: April 28, 2007
User Name	System Name	Network Address	Action	Policy Accept	Filename					Time
AlCapone	COMPUTER2	192.168.0.100	DeviceInserted							2007-04-08 11:38:24
AlCapone	COMPUTER2	192.168.0.100	PolicyAction	Yes, Event#(2)						2007-04-28 11:38:44
AlCapone	COMPUTER2	192.168.0.100	FileCopied		Source->C://Documents and Settings//AlCapone//My Documents//Customer List.xls, Event#(3) F://Customer List.xls					2007-04-28 11:39:32
AlCapone	COMPUTER2	192.168.0.100	FileCopied		Source->F://Customer List.xls, Event#(4) F://Copy of Customer List.xls					2007-04-28 11:40:15
AlCapone	COMPUTER2	192.168.0.100	FileDeleted		Event#(5) F://Customer List.xls					2007-04-28 11:41:24
AlCapone	COMPUTER2	192.168.0.100	FileModified		Event#(6) F://Copy of Customer List.xls					2007-04-28 11:42:50
AlCapone	COMPUTER2	192.168.0.100	FileModified		Event#(7) F://New List.xls					2007-04-28 11:42:50
AlCapone	COMPUTER2	192.168.0.100	DeviceRemoved							2007-04-28 11:44:12
	The USB Session Report displays individual events that occured during an unique USB activity session, from the moment the USB Mass Storage Device is inserted until the moment the same USB Mass Storage Device is removed.  It is another forensic type report that can detail the exact characteristics of a typical session.