USB Flash Drive Forensics presented at 44Con 2011

by Philip Polstra,

Summary : This talk discusses the use of microcontrollers to examine USB mass storage devices. I will be discussing several devices including a self-contained USB pocket duplicator which doesn't require a PC, an inexpensive USB flash drive imager and write blocker, and a device that can be used to perform these to functions which also has a PC interface. Source code and schematics will be provided for all devices, along with a demo.