Skip to content

Latest commit

 

History

History
27 lines (23 loc) · 1.2 KB

README.md

File metadata and controls

27 lines (23 loc) · 1.2 KB
Raw

Bustr

     ____             __
    / __ )__  _______/ /______
   / /_/ / / / / ___/ __/ ___/
  / /_/ / /_/ (__  ) /_/ /    
 /_____/\__,_/____/\__/_/     Version 1.0.0

Bustr is a utility built to discover if any new USB, Storage, Phone or Bluetooth device has been attached/paired with the operating system, by monitoring registry artifacts. If a discovery is made, generate HTML page containing log results and registry data. Tested this with 4 different USB manufacturers and Android and iPhone.

Preview

bustr

Ability to monitor activity of these registry artifacts simultaneously:

  • SYSTEM\MountedDevices
  • SYSTEM\CurrentControlSet\Enum\USB
  • SYSTEM\CurrentControlSet\Enum\SCSI
  • SYSTEM\CurrentControlSet\Enum\BTHENUM
  • SYSTEM\CurrentControlSet\Enum\USBSTOR
  • SYSTEM\CurrentControlSet\Enum\STORAGE\Volume
  • SOFTWARE\Microsoft\Windows Portable Devices\Device
  • SYSTEM\CurrentControlSet\Enum\SWD\WPDBUSENUM
  • SYSTEM\CurrentControlSet\Services\BTHPORT\Parameters\Devices
  • Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\CPC\Volume
  • Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers\KnownDevices