USB Artifacts - BenWare-FED/FOR230 GitHub Wiki

At least 7 locations in Windows Registry

C:\Windows\INF\Setupapi log file

At least 3 different Windows Event logs

LNK and Jumplists