Corbett
Corbett USB History Viewer lists every USB drive ever connected to a Windows PC, with device name, type, size, serial number, plug and unplug times, file system and device ID. Errors and warnings show at the bottom of the window, and the licensed edition exports the report in one click. Try the free demo on your own PC first.
Download free demo Purchase now
Reports build from the records on your PC. Nothing is sent to Corbett.
Free demo, a 30 day money back window.
Lifetime licence from $49 Free demo shows 10 USB entries
Device facts
Files go missing after a staff member leaves, and you need to know if a pen drive was involved and when. Windows keeps traces of every connected USB device, but they sit scattered across the registry and system logs. USB History Viewer gathers them into one readable report.
Details recorded
7Device types
7Report parts
8Not shown
4Where Windows Keeps USB Traces
Windows records attached storage in the USBSTOR registry key, in setupapi.dev.log and in its event logs. USB History Viewer combines those traces into one list.
Investigating mail on the same PC? Profile Outlook data with the PST File Analyzer and clean file details with the Metadata Cleaner.
Core features
Three screens of Corbett USB History Viewer, in working order.
Proceed
Launch USB History Viewer and click Proceed. Reports build from the records on your PC without setup or extra software.
No agent or service gets installed, and the check happens on the PC you are auditing.
Device list
New and previously connected devices appear together with a total count, so the scale of USB use on the PC is clear at once. Select one device to open its full record.
Serial number, plug and unplug times, revision, size, file system and device ID sit in one table.
Logs
Errors and warnings appear at the bottom of the window, apart from the device list. Failed recognition and repeated disconnects point to faulty ports, cables or drives.
Driver conflicts show up here too, so one report covers both audits and troubleshooting.
Working process
Four steps take you from a plain Windows PC to a full USB report. Try them with the free demo first.
Install and launch
Download USB History Viewer and install it on Windows. Start it with Run as Administrator.
Press Proceed
Click Proceed and USB History Viewer builds the history report from the records on your PC.
Check the device list
Look through new and previously connected drives. Select one device to see its serial number, times and device ID.
Review logs and export
Check the errors and warnings at the bottom. Export the report to a protected folder with the licensed edition.
Need mail evidence from the same PC? Open the PST File Analyzer.
Working process
Prefer text? Open the USB History Viewer guide for the three steps in pictures.
More options
Small details that make a USB audit quick and clear.
One click report
Press Proceed and the report builds
Past devices
Previously connected drives included
Total count
See how many devices connected
USB type
Shown for every entry
Serial number
Ties an entry to a physical drive
Plug and unplug times
Frame when a drive was in use
Size and file system
Capacity and format per device
Revision and device ID
Finish the record
Single device detail
Select one device from the list
Error logs
Failed recognition listed
Warning logs
Repeated disconnects flagged
Report export
Save to any folder with a licence
Device types
USB History Viewer reports storage devices of every kind. Match your case to the list below.
Pen drives
Flash drives of any size
External hard drives
Portable disks over USB
SSD enclosures
External solid state storage
Card readers
Memory cards in USB readers
Phones in storage mode
Handsets used as drives
USB keys
Small storage keys
Unknown devices
Entries you cannot name stand out
Past devices
Drives removed long ago
Free demo
Test USB History Viewer on a Real PC
Install the free demo and press Proceed on the PC you need to check. USB History Viewer shows the first 10 USB entries in full detail, so you judge the report before buying.
Download free demoTry before you buy
Free demo of USB History Viewer shows the first 10 entries in full detail. Export needs a licence.
| Feature | Free demo | Full version |
|---|---|---|
| Device entries | First 10 | All entries |
| Entry detail | Full detail | Full detail |
| Report export | Locked | Included |
| Price | Free | From $49 one time |
Use cases
Anyone who needs facts about USB use on a Windows PC.
IT admins
Monitor USB access on office computers and find drives nobody approved.
Forensic examiners
Trace data theft and document device use for a case file.
Audit teams
Save a clean USB history report for compliance records.
Managers
Check which drives touched a PC after a staff member leaves.
Support teams
Spot faulty ports, cables and drives from the error and warning logs.
PC owners
Find out which drives connected to a company or family computer.
Why Corbett
Lifetime licence
From $49, one payment
Stays on your PC
Nothing is sent to Corbett
One click report
No setup or extra software
No changes made
Your PC stays unchanged
Single device detail
Serial number and times
Error and warning logs
Kept apart from the list
30 day refund
Money back window after purchase
24/7 support
Free product support included
Before you audit
USB History Viewer reports device history on Windows. Here is what that covers and where it stops.
| Capability | Status | What it means |
|---|---|---|
| Connected devices | Yes | New and previously connected USB drives with a total count |
| Device facts | Yes | Name, type, size, serial number, plug and unplug times, revision, file system and device ID |
| Error and warning logs | Yes | Failed recognition and repeated disconnects |
| Report export | Licensed | Save the report to any folder after you buy |
| Files on the drive | Not shown | USB History Viewer reports devices and connection history, not file names |
| Older records | Depends on Windows | Windows can clear older records after updates or cleanups, so the report shows what the system still holds |
| Mac and Linux | No | USB History Viewer installs on Windows only |
Manual or tool
The USBSTOR key in Registry Editor lists past storage devices at no cost. Making sense of it takes skill and time, and the rows below show where USB History Viewer steps in.
| Job | Registry Editor | USB History Viewer |
|---|---|---|
| Cost | Built into Windows | $49 one time |
| List past drives | Under USBSTOR | Listed plainly |
| Plug and unplug times | Spread across logs | In one table |
| Serial numbers | Inside key names | Own column |
| Errors and warnings | Event Viewer needed | Shown in the tool |
| Risk of damage | Wrong edits break Windows | Changes nothing |
| Report export | Manual notes | One click |
| Skill needed | Registry knowledge | None |
An experienced admin can check USBSTOR for a quick answer. Everything else belongs to USB History Viewer.
Specifications
Download details
System
Supported editions
Windows 11, 10, 8 and 7 in 32 bit or 64 bit, plus Windows Server 2008 to 2019. No macOS or Linux build.
Launch the setup with Run as Administrator from the right click menu.
Device history questions go straight to the developers.
User testimonials
USB History Viewer earns 493 reviews from buyers.
Collected across 493 reviews from software portals and support email. Three reviews below are unedited.
To find a reliable way to track USB activity on my company device, I use this software. It is such a great program for generating the report as it gives you detailed logs and other important data which helped me in finding the unauthorized USB usage.
This fantastic tool helps me in my digital forensic investigation. It helped me get useful information regarding the USB connection history. This tool is great for forensic investigation.
I download this tool to monitor USB access on my office computers. It is an incredible software where I can easily use and export my reports without needing any help. I highly recommend this tool to anyone, who has trouble checking their USB event.
Before reporting
Three habits keep a USB report defensible.
Record the time zone
Plug and unplug times depend on the system clock. Note the time zone and any clock drift in the case file.
Avoid plugging in new devices
New drives add entries. Launch USB History Viewer from the PC itself and keep other USB devices out until you save the report.
Save and hash the report
Export the report straight away, store a copy with the case and record a hash so you can show it unchanged later.
Related forensic tools are the PST File Analyzer and Metadata Cleaner.
Safety checks
Four habits keep a USB check accurate.
Leave the PC unchanged
USB History Viewer uses existing records and alters nothing on your PC.
Save to a protected folder
Export the report to a protected folder before you share it with the case team.
Check the logs
Failed recognition and repeated disconnects point to faulty ports, cables or drives.
Compare serial numbers
Unknown serial numbers and odd plug times stand out against your asset list.
Common questions
Usb history viewer devices, logs, forensics and what the demo shows.
USB History Viewer is Windows software from Corbett that lists every USB drive connected to a PC with serial numbers, plug and unplug times and device IDs.
Launch USB History Viewer and click Proceed. A report of past USB devices appears with all details.
Count, USB type, size, plug and unplug time, serial number, revision, file system and device ID.
Yes. New and previously connected drives both appear, as far back as Windows kept records.
Windows can clear older records after updates or cleanups. USB History Viewer shows what the system still holds.
No. USB History Viewer reports the device and its connection history, not the files it holds.
Yes. Unknown serial numbers and odd plug times stand out in the report.
Yes. Choose the device from the list to see its full record.
Yes. Investigators use USB History Viewer to trace data theft and document device use.
Yes. Error and warning logs show failed recognition and repeated disconnects.
Yes, in the licensed edition. Save the report to any folder for audits or cases.
No. USB History Viewer uses existing records only.
No. Your report stays on your computer.
Pen drives, external hard drives, SSD enclosures, card readers, phones in storage mode, USB keys and unknown devices.
Registry Editor lists past devices under USBSTOR at no cost but needs registry knowledge. USB History Viewer puts serial numbers, times and logs in one report.
Free demo shows the first 10 USB entries with full detail. Export needs a licence.
Personal costs $49 for 2 PCs, Business costs $99 for 10 PCs and Enterprise costs $299 for 50 PCs. You pay once for a lifetime licence.
You receive the download link and the key by email after payment.
Windows 11, 10, 8 and 7 in 32 bit or 64 bit, plus Windows Server 2008 to 2019. There is no macOS or Linux build.
USB History Viewer downloads at 5.5 MB. Keep 131.1 MB of free disk space, 2 GB of RAM and a Core 2 Duo 2.4 GHz processor. Start the setup with Run as Administrator.
Yes. Refund requests made within 30 days of purchase are accepted. See the refund policy for details.
Open the USB History Viewer guide for the three steps with screenshots.
USB History Viewer guides
Help for audits, storage checks and recovery.
Investigation
Storage tools
Mailbox moves between services are on the Email Migration Tool page and server moves on the IMAP Migration Tool page. Saved mailbox formats go to the email converter tool, corrupt mail stores need email recovery software and email viewer software opens saved mail free. More utilities are Sitemap Generator and Website Downloader. Also see Email Eraser Tool, Image File Converter, XLS to CSV Converter, Email Address Validator and VBA Password Remover.
Get started
See 10 entries free, check the detail and buy when the report fits your case. Refund requests on the $49 licence are accepted for 30 days.
Download free demo Purchase now
5.5 MB · Windows 11 to 7 and Windows Server 2019 to 2008 · 30 day money back