Gary is checking for the devices connected to USB ports of a suspect system during an investigation. Select the appropriate tool that will help him document all the connected devices.

The correct answer is B. Devcon. Devcon (Device Console) is a Microsoft command-line utility that replicates and extends the functionality of Device Manager. It can enumerate all hardware devices currently connected to a system, including USB devices, along with their hardware IDs, status, and driver…

Submitted by fatema_kw· Apr 18, 2026Computer Forensics Investigation Process

Question

Options

ADevScan
BDevcon
Cfsutil
DReg.exe

How the community answered

(52 responses)

A
2% (1)
B
90% (47)
C
2% (1)
D
6% (3)

Explanation

Devcon (Device Console) is a Microsoft command-line utility that replicates and extends the functionality of Device Manager. It can enumerate all hardware devices currently connected to a system, including USB devices, along with their hardware IDs, status, and driver information, making it useful for forensic documentation of connected devices. fsutil is a file system utility for managing volumes and files. Reg.exe is a command-line registry editor. DevScan is not a standard or widely recognized forensic tool for this purpose.

Topics

#USB Device Analysis#Forensic Tools#Windows Command-line Utilities#Evidence Collection

Community Discussion

No community discussion yet for this question.

Full 312-49 Practice