Research on USB Storage Occupancy Traceability in Windows Environment Based on Log Analysis

With the widespread use of USB storage devices, their stable and reliable operation has become key to ensuring user data security. In Windows systems, USB storage devices may sometimes be in use by a process or resource, making it unsafe to eject them. Forcing an eject can result in data loss on the USB storage device. In light of this background, this paper investigates the techniques and methods for tracing USB storage utilization in Windows environments based on log analysis. By screening and matching system logs and process information, we can automatically locate and identify USB storage device utilization and generate user prompts. This effectively ensures the data security of USB storage devices and improves the user experience when using USB storage devices.