Insider Threat Matrix™Insider Threat Matrix™
  • ID: PR004.003
  • Created: 05th April 2026
  • Updated: 05th April 2026
  • Contributor: The ITM Team

Removable Media File Exploration

The subject browses, searches, or navigates files stored on removable media to identify data of interest. This includes interaction with external storage devices such as USB flash drives, external hard drives, memory cards, or other mountable media connected to an endpoint.

 

File exploration on removable media may involve directory traversal, file listing, previewing, or opening files directly from the mounted device. This activity can occur either on media introduced by the subject or on devices previously used for data staging or transfer.