Kaseya Community

Monitor for use of a USB Drive

  • I'm needing to monitor for the use of any USB Drive. I need to notified when someone plugs in a USB Drive or Unplugs a drive. Is a monitor the best way of doing this. Can anyone help me with this or show an example of how to set it up.

    Legacy Forum Name: Monitor for use of a USB Drive,
    Legacy Posted By Username: ModernTechIT
  • Assuming you are already scheduling audits:

    You may be able to accomplish this through system audits. Set it up by going to: Monitor, Alerts, select alert function: hardware changes.

    Kaseya will compare the current audit to the previous and alert you of any changes. One major downside is the alert won't be instantaneous.

    Legacy Forum Name: Monitor Sets,
    Legacy Posted By Username: pbrophy
  • Do adding USB devices (or removing them) get written to the event log?? If so why not create an event set that looks for those specific events. Then apply this event set to whatever devices you are monitoring. Just a quick thought...

    Legacy Forum Name: Monitor Sets,
    Legacy Posted By Username: boudj
  • Hi,

    You can download USBDLM, and set it up so that it writes an event to the Event logs.

    It will log whenever someone connects or disconnects a USB device.

    All you need is USBDLM, and 2 Event log monitor sets, and it will send in realtime.

    Regards,
    Ryan

    Legacy Forum Name: Monitor Sets,
    Legacy Posted By Username: ryan.odwyer