usbdeviceforensics: extracting USB information from Windows registry hives