USB ripper

Can I get a hint please, feel like I am missing the obvious, I have found a violation event but looking at the surrounding times within syslog doesn’t show me anything and using the PID/VID doesnt seem to bring me any help either so clearly I am missing something :<

Update.

Nevermind sorted, fml.