I downloaded files from an old company computer to an external USB device, can the company tell which files were copied or only that I copied files?


1 Answer 1


This depends on how they might go about checking it, if for example they where to use a full Forensics examination then there would be registry information stored for, when the device was connected. And from there using a software such as FTK or EnCase it would be possible to see the signature of that devise and potentially follow the files signatures and path.

  • however, this would only tell them that the device was plugged in, it would not tell them if any files were copied
    – MikeSchem
    Jul 29, 2017 at 1:31

Not the answer you're looking for? Browse other questions tagged .