USB Device Forensics: Insertion and removal timestamps of USB devices in Windows 8
Windows Registry Forensics: An Imperative Step in Tracking Data Theft via USB Devices