[sleuthkit-users] USB setupapi disk image

[Sarah A. <sa...@ny...>]

For my digital forensics course, I am developing an Autopsy Python plugin
that analyzes USB device history. I haven't yet located a sample forensics
disk image that contains a setupapi log. The setupapi log would tell you
when a USB device history was first installed. Any help locating a disk
image would be greatly appreciated!

-Sarah Ash