Fiddling with Flash Drive Forensics

BSides SATX 2018

Presented by: Alexander Klepal
Date: Saturday June 16, 2018
Time: 13:00 - 14:00
Location: Moody 102
Track: Track 1 In The Beginning

It always makes me nervous when you ask questions in class, Alex... Your brain is more evil than mine."

-Dr. Beebe, Digital Forensics Professor

One day in class, we were discussing the list of USB drives plugged into a Windows machine showing in the registry and it was said they can be used as evidence a drive has been inserted into this machine, but the lack of a key isn't evidence of it NOT having been plugged in (You can always delete the key). I asked "Can I export a key from one computer pertaining to a drive and just plant it by importing it?" and this presentation was born.

Alexander Klepal

Alexander Klepal is a student in pursuit of a Bachelor of Business Administration (BBA) focused in Cybersecurity from The University of Texas at San Antonio. As a nationally ranked Penetration Tester (2nd in CIAS Cyber Panoply Fall 2016), regionally ranked CCDC Competitor (2nd at SWCCDC Spring 2017), and President of the UTSA Computer Security Association, his hobbies include study of cybersecurity, leisurely playing video games, and puns. Lots of puns.


KhanFu - Mobile schedules for INFOSEC conferences.
Mobile interface | Alternate Formats