I want help from you ppl .
the problem is that I want to trace the use of USB storage devices viz. pen drives on the target computers and account which pen drive(USB storage drive) was used when and how many times.

Though I can find the use of all the USB devices at 'setupapi.log' but the problem is I cannot differentiate between pen drives. Can any body help in explaining as what and where traces are left by USB device when insertng into the USB port.

It leaves traces in the hidden section of device manager of what type of device was plugged into what port. Maybe you could write a script to detect and log when new devices are put on and/or become active? Also, pen drives and the such will become a drive in explorer. See if a search provides scripts to detect new drives and if the driver that is used is made for USB. Im sure there are many other ways as well.

but how this is possible to know about the usb devices inserted into linux box. How will i find that which user tried to inserted at which timings.

Thanks

From what I have done for my work is write a little inventory program to log all the hardware on the computer. Then make a default inventory of the computer. ie without the usb drive. So that when there is a hardware change the computer will re-inventory the computer. Then you just dump the data into a nice report and you have your log with who put what in the usb when and even for how long.

Hope this helps.

could u pls explain. what software???

Sorry know I wrote the software in C cause thats what my work uses. We don't have money to buy software so if we want anything we have to make it. So I am not sure what language you are familiar with but If you search on like msdn or google you should find what you are looking for. I can't upload my exe file so you can see an example. Basically I have a exe file that runs and sends information to a sql server. We then have a base inventory and compare it. Then send an alert to the admin.