<story><title>Show HN: CLI forensics tool for tracking USB device artifacts on Linux</title><url>https://github.com/snovvcrash/usbrip</url></story><parent_chain></parent_chain><comment><author>jaclaz</author><text>Question:
From the screenshots it seems like no year is shown?
Only month, day, time.&lt;p&gt;It would be IMHO advisable to use not the name of the month and &lt;i&gt;somehow&lt;/i&gt; fit in the line the year.&lt;p&gt;Note:
Small typo: the past of &amp;quot;shut down&amp;quot; is &amp;quot;shut down&amp;quot; and not &amp;quot;shutted down&amp;quot;.</text></comment>
<story><title>Show HN: CLI forensics tool for tracking USB device artifacts on Linux</title><url>https://github.com/snovvcrash/usbrip</url></story><parent_chain></parent_chain><comment><author>MartijnBraam</author><text>Wouldn&amp;#x27;t this be more reliable by recording udev events instead of parsing the syslog?</text></comment>