Tracking connected devices
Results 1 to 3 of 3

Thread: Tracking connected devices

  1. #1
    Senior Member
    Join Date
    Jan 2004
    Posts
    228

    Tracking connected devices

    Hey guys,

    I want to find a way to log whenever someone connects a USB drive to a computer. The target workstation runs Windows XP Pro. I tried setting up an Alarm to indicate whenever the logical disk goes over 100MB, but it didn't work right. I was wondering if you guys have ever done this? I figure there has got to be some way to track the digital signature of any device that loads into the OS. Hopefully a solution that is built into Windows XP Pro.

    Thanks,

    warriorfan808

  2. #2
    Member
    Join Date
    Jul 2009
    Posts
    45
    There's a low cost program here...

    http://www.dodownload.com/antivir+se...e+monitor.html

    just searched for it, have not tried it yet... There's also a free demo (5 client) one

    http://www.networkusbmonitor.com/

    there ... if you read the panel bottom left ..

    You can download the freeware demo version of USB Data Protection Tool for Windows Network within few mouse clicks. Demo version can monitor only five clients in network
    Keep in mind.. these should be scanned for spy/ad/virusware before use .... keep an eye on what the system is doing.. you can never be too safe these days..

  3. #3
    Super Moderator: GMT Zone nihil's Avatar
    Join Date
    Jul 2003
    Location
    United Kingdom: Bridlington
    Posts
    17,190
    Hi warriorfan,

    What is it exactly you are trying to do? Just monitoring when a USB drive is connected won't necessarily help, as you don't know who did it. Also, what if the drive was already connected at bootup?

    XP Pro detects when a drive was attached but I don't know if there is a log entry generated and certainly not if it identifies the device. From what I can see it automatically accepts anything that was attached before boot-up.

    Another consideration is even if you can tell that a device was connected, how would you know what was done with it?

    Perhaps a different approach would be to specify authorised devices which could be easily assigned to individuals. A nice feature would be if it would only let the authorised individual attach the device if they were logged in to that workstation?

    You might like to look at this:

    http://www.fileguru.com/UHook-USB-Disk-Security/info

    Several USB security products there
    If you cannot do someone any good: don't do them any harm....
    As long as you did this to one of these, the least of my little ones............you did it unto Me.
    What profiteth a man if he gains the entire World at the expense of his immortal soul?

Similar Threads

  1. UK Union says Stop using RFID tracking devices on Workers
    By Egaladeist in forum Security News
    Replies: 1
    Last Post: August 12th, 2005, 08:37 PM
  2. Wireless 101
    By mmelby in forum The Security Tutorials Forum
    Replies: 1
    Last Post: October 23rd, 2002, 02:31 PM
  3. Mobile Phones = Tracking Devices
    By powertoad5000 in forum AntiOnline's General Chit Chat
    Replies: 9
    Last Post: October 20th, 2002, 11:12 PM
  4. The Worlds Longest Thread!
    By Noble Hamlet in forum AntiOnline's General Chit Chat
    Replies: 1100
    Last Post: March 17th, 2002, 08:38 AM
  5. Information Leakage from Optical Emanations
    By E5C4P3 in forum Miscellaneous Security Discussions
    Replies: 5
    Last Post: March 7th, 2002, 06:35 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

 Security News

     Patches

       Security Trends

         How-To

           Buying Guides