I downloaded files from an old company computer to an external USB device, can the company tell which files were copied or only that I copied files?


This depends on how they might go about checking it, if for example they where to use a full Forensics examination then there would be registry information stored for, when the device was connected. And from there using a software such as FTK or EnCase it would be possible to see the signature of that devise and potentially follow the files signatures and path.

|improve this answer|||||
  • however, this would only tell them that the device was plugged in, it would not tell them if any files were copied – MikeSchem Jul 29 '17 at 1:31

Not the answer you're looking for? Browse other questions tagged or ask your own question.