VIEWING CONNECTED USB DEVICES

The registry stores information on the USB devices that have been connected to the system. This information is present in the SYSTEM hive

#access registry editor
PS C:\> Start-Process regedit

#navigate
REGISTRY> HKLM\SYSTEM\CurrentControlSet\Enum\USBSTOR

 Disk&Ven_SanDisk&Prod_CruzerBlade&Rev_1.00
  4C530001230918114594

 * this will display the USB devices' information (make, model, and device ID)
 
 * Each device will have the following
    - A main subkey that is the identification of the type and manufacturer of the USB device.
	   - e.g., Disk&Ven_SanDisk&Prod_CruzerBlade&Rev_1.00
    - A subkey under the above (for example) that represents the unique devices under this model.
	   - e.g., 4C530001230918114594