Corbett
Corbett USB History Viewer lists every USB drive ever connected to a Windows PC, with device name, type, size, serial number, plug and unplug times, file system and device ID. Errors and warnings show at the bottom, and the full report exports in one click. Built for Windows, trial included.
Download free demo Purchase now
The report is built from this PC's own records. Nothing is sent to Corbett.
Free demo, scanned clean on VirusTotal and a 30-day money-back window.
Lifetime licence from $49 Free trial shows 10 USB entries
Device facts
A staff member leaves and files go missing. Was a pen drive involved, and when? Windows keeps traces of every USB device it has met, but they sit scattered across the registry and system logs. USB History Viewer gathers them into one readable report in under a minute.
Recorded
Device types
Report parts
Not shown
Where Windows keeps USB traces
Windows records attached storage in the USBSTOR registry key, in setupapi.dev.log and in its event logs. Reading them by hand takes hours and some entries are easy to misread. USB History Viewer combines those traces into one list.
Core features
Launch, press Proceed, read the report and check the logs.
Start
Launch the tool and click Proceed. The history report builds from the PC's records without any setup or extra software.
Device list
New and previously connected devices appear together with a total count, so the scale of USB use on the PC is clear at once.
Device detail
Choose a device from the list to see its full record, useful when one serial number matters more than the rest.
Logs
Errors and warnings appear at the bottom of the window. Failed recognition and repeated disconnects point to faulty ports, cables or drives.
Export
Save the full report to a secure folder for an audit file or case record. The licensed edition unlocks export.
Before reporting
Three habits that keep a USB report defensible.
Time zone
Record the PC's time zone
Plug and unplug times depend on the system clock. Note the time zone and any clock drift in the case file.
Live system
Avoid plugging in new devices
Every new drive adds entries. Run the tool from the PC itself and keep other USB devices out until the report is saved.
Evidence
Save and hash the report
Export the report straight away, store a copy with the case and record a hash so it can be shown unchanged later.
Related forensic tools are the PST File Analyzer and Metadata Cleaner.
Free trial
View 10 USB Entries Free
Install the trial on the PC to check and see the first 10 device entries with full detail. Buy to see the rest and export.
Download free demoBefore purchase
The USBSTOR key in Registry Editor lists past storage devices at no cost. Making sense of it takes skill and time, and a slip can damage the system. The rows below compare both.
| Job | Registry Editor | USB History Viewer |
|---|---|---|
| Cost | Built into Windows | $49 one time |
| List past drives | Under USBSTOR | Listed plainly |
| Plug and unplug times | Spread across logs | In one table |
| Serial numbers | Inside key names | Own column |
| Errors and warnings | Event Viewer needed | Shown in the tool |
| Risk of damage | Edits can break Windows | Read only |
| Report export | Manual notes | One click |
| Skill needed | Registry knowledge | None |
Green rows mark where Registry Editor is enough.
An experienced admin can read USBSTOR for a quick answer. Mailbox evidence on the same PC is profiled with the PST File Analyzer .
Specifications
Download details
System
Supported editions
Windows 11, 10, 8 and 7 in 32-bit or 64-bit, plus Windows Server 2008 to 2019.
No macOS or Linux build.
Corbett has built Windows email utilities since 2020. Device history questions go straight to the developers.
Common questions
Devices, logs, forensics and what the trial shows.
Launch the tool and click Proceed. The report of past USB devices appears with all details.
No. It reports the device and its connection history, not the files it holds.
Yes. New and previously connected drives both appear, as far back as Windows kept records.
Yes. Unknown serial numbers and odd plug times stand out in the report.
Count, USB type, size, plug and unplug time, serial number, revision, file system and device ID.
Yes, in the licensed edition. Save it to any folder for audits or cases.
Yes. Error and warning logs show failed recognition and repeated disconnects.
Yes. Investigators use it to trace data theft and document device use.
Yes. Choose it from the list to see its full record.
No. It only reads existing records.
Windows may clear older records after updates or cleanups. The tool shows what the system still holds.
No. The report stays on your computer.
No. It needs Windows 7 to 11 or Windows Server 2008 to 2019.
Prices start at $49 and team editions cost more. You pay once.
The first 10 USB entries with full detail. Export needs a licence.
Step by step
Utilities that pair with a USB audit.
Investigation
Storage tools
Mailbox moves between services are on the Email Migration Tool page, server moves on the IMAP Migration Tool page. Saved mailbox formats are handled by the email converter tool. Corrupt mail stores go to the email recovery software. Mail evidence opens free in the email viewer software. More utilities: Sitemap Generator and Website Downloader. Also see the Email Eraser Tool, Image File Converter, XLS to CSV Converter, Email Address Validator and VBA Password Remover.
User testimonials
493 ratings from IT admins and investigators who audited USB use with Corbett.
Collected across 493 reviews sent through software portals and support email. The three below are unaltered.
To find a reliable way to track USB activity on my company device, I use this software. It is such a great program for generating the report as it gives you detailed logs and other important data which helped me in finding the unauthorized USB usage.
This fantastic tool helps me in my digital forensic investigation. It helped me get useful information regarding the USB connection history. This tool is great for forensic investigation.
I download this tool to monitor USB access on my office computers. It is an incredible software where I can easily use and export my reports without needing any help. I highly recommend this tool to anyone, who has trouble checking their USB event.
Get started
See 10 entries free, check the detail and buy when the report fits the case. Refund requests on the $49 licence are accepted for 30 days.
Download free demo Purchase now
5.5 MB · Windows 11 to 7 and Windows Server 2019 to 2008 · 30 day money back