December 28th, 2009, 12:43 PM
Tracking connected devices
I want to find a way to log whenever someone connects a USB drive to a computer. The target workstation runs Windows XP Pro. I tried setting up an Alarm to indicate whenever the logical disk goes over 100MB, but it didn't work right. I was wondering if you guys have ever done this? I figure there has got to be some way to track the digital signature of any device that loads into the OS. Hopefully a solution that is built into Windows XP Pro.
December 28th, 2009, 01:54 PM
There's a low cost program here...
just searched for it, have not tried it yet... There's also a free demo (5 client) one
there ... if you read the panel bottom left ..
Keep in mind.. these should be scanned for spy/ad/virusware before use .... keep an eye on what the system is doing.. you can never be too safe these days..
You can download the freeware demo version of USB Data Protection Tool for Windows Network within few mouse clicks. Demo version can monitor only five clients in network
January 1st, 2010, 09:59 PM
What is it exactly you are trying to do? Just monitoring when a USB drive is connected won't necessarily help, as you don't know who did it. Also, what if the drive was already connected at bootup?
XP Pro detects when a drive was attached but I don't know if there is a log entry generated and certainly not if it identifies the device. From what I can see it automatically accepts anything that was attached before boot-up.
Another consideration is even if you can tell that a device was connected, how would you know what was done with it?
Perhaps a different approach would be to specify authorised devices which could be easily assigned to individuals. A nice feature would be if it would only let the authorised individual attach the device if they were logged in to that workstation?
You might like to look at this:
Several USB security products there
By Egaladeist in forum Security News
Last Post: August 12th, 2005, 08:37 PM
By mmelby in forum The Security Tutorials Forum
Last Post: October 23rd, 2002, 02:31 PM
By powertoad5000 in forum AntiOnline's General Chit Chat
Last Post: October 20th, 2002, 11:12 PM
By Noble Hamlet in forum AntiOnline's General Chit Chat
Last Post: March 17th, 2002, 08:38 AM
By E5C4P3 in forum Miscellaneous Security Discussions
Last Post: March 7th, 2002, 06:35 AM