抄録
An information leakage may occur by forgetting to delete important files that are copied to personal computer from portable storage media. This study proposes a method to distinguish an operation that copies a part of contents in files by analyzing the clipboard and directory logs stored on a personal computer.