hideakii https://blog.hatena.ne.jp/hideakii/ @port139 Blog https://port139.hatenablog.com/ Note:I translated Japanese into English using Google Translate.Thank you, Google. When audit setting "Audit PNP Activity" is enabled on Windows 10, event ID 6416 is recorded. Auditing is not enabled for this item by default. Let's check the record when connecting the USB memory. Connect the USB memo… 190 <iframe src="https://hatenablog-parts.com/embed?url=https%3A%2F%2Fport139.hatenablog.com%2Fentry%2F2018%2F10%2F28%2F174310" title="Audit PNP Activity and ID 6416 - @port139 Blog" class="embed-card embed-blogcard" scrolling="no" frameborder="0" style="display: block; width: 100%; height: 190px; max-width: 500px; margin: 10px 0px;"></iframe> https://cdn-ak.f.st-hatena.com/images/fotolife/h/hideakii/20181028/20181028165248.jpg Hatena Blog https://hatena.blog 2018-10-28 17:43:10 rich https://port139.hatenablog.com/entry/2018/10/28/174310 1.0 100%