Impero Log query

[Yet_Another_IT_Guy]

Hello

 

I've come across a weird thing with Impero logs that may be a bug, I'm curious if anyone else ran into this issue.

 

All the accounts below are exam accounts and Impero thinks that the students had somehow used USB sticks during this mock exam.

 

From some investigating the invidulators were in the room and were constantly walking around so the possibility that any of the students were actually using USB sticks is quite low, and I doubt that all 30 students have somehow coordinated to all cheat in the exact same way.

 

On top of that the timing in the logs is weird as well. It seems that within seconds they had inserted then removed the drive.

 

Still investigating to rule out all possibilities but wanted to see if anyone dealt with this before.

 

Thanks in advance