Skip to content
  • Home
  • DFIR Blog
    • Cloud Artifacts
    • Web Browser Artifacts
    • Operating System Artifacts
    • Guides and Tutorials
    • Personal Views and Thoughts
  • Contact Us
Atropos4n6
  • Home
  • DFIR Blog
    • Cloud Artifacts
    • Web Browser Artifacts
    • Operating System Artifacts
    • Guides and Tutorials
    • Personal Views and Thoughts
  • Contact Us
Atropos4n6

Are you sure you extract all the available Volume Serial Numbers (VSNs) that reside in the Windows 10 Event Log “Microsoft-Windows-Partition%4Diagnostic.evtx”?

  • Operating System Artifacts, Windows

This time we shall see, how we can utilize windows' event logs in order to locate the VSN of a desired removable device and determine if it changes and when.

  • December, 2020
Read MoreAre you sure you extract all the available Volume Serial Numbers (VSNs) that reside in the Windows 10 Event Log “Microsoft-Windows-Partition%4Diagnostic.evtx”?
  • Home
  • DFIR Blog
  • Contact Us

Copyright © 2025