My questions are, is there a way to see what was copied to the usb devices, second, is there anything in the live responder to actually tell if the cd or dvd burner has been used and maybe the types of files copied also, so as a first responder I know if I need to look deeper into whats in the area of investigation.