A script to parse macos legacy system.log files for USB mass storage device entries and correlates the USBMSC to the USB ID database. The script will go through compressed gzip or uncompressed files.
*Original version was a losely based port of the logic in Jason Hale's usbmsc.pl perl script.
Latest version adds unique device matches
Category: USB
Category URL: http://www.dfir.training/component/mtree/tools/forensic-utilities/usb?Itemid=