James, a forensic specialist, was appointed to investigate an incident in an organization.

In the given scenario, James employed the DriveLetterView utility to capture the list of all devices connected to the local machine. DriveLetterView is a tool that displays a list of drive letters assigned to drives on a computer, including external storage devices. By using this utility, James can identify any suspicious devices connected to the internal systems. References: EC-Council Certified Security Specialist (E|CSS) documents and study guide12.