You will need to also look at the Program that created the incident. There can be cases where the file was created in a Program from scratch and then saved to the USB device.
For example if I open Word and create a document and for the first time I save it to the USB drive. Also if I download a file from the Web and save it directly to the USB device.
Also keep in mind that many laptops NOW have Hard Drives that are considered USB devices by Windows and are represented as a device string in the Incidents.
So it is up to the application on how itmight have been created or utilized.
Hope this makes sense.
If this solves your questions please marked as solved.
I have stated the reasons for the blank fields in the Worksheet " Reason".
Please download the below file....
Please make sure to mark this as a solution to your problem, when possible.
please ge the updated link.....
If you have received your answer please Mark A Solution. If multiple post help you please select the "Request split solution "Option