Log Event for USB connection Expand / Collapse
Author
Message
Posted 1/23/2017 10:41:33 AM
Forum Newbie

Forum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum NewbieForum Newbie

Group: Forum Members
Last Login: 1/23/2017 10:21:27 AM
Posts: 1, Visits: 0
Hi there,
Does anyone know if the Event ID 4656 can be used to create alerts for USB devices connected. I can see that the "plugplaymanager" appears as the source. However these are very generic events and every time a a USB is connected there are hundreds of these events. Anyone know if there is a more effective event ID for USB devices connected on server 2008/2012?
Post #7308
Posted 1/23/2017 7:02:43 PM
Supreme Being

Supreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme BeingSupreme Being

Group: Moderators
Last Login: 11/14/2013 3:17:47 PM
Posts: 237, Visits: 0
This is a tough question that is often handled by end point security software. I would start by taking a look here http://dfstream.blogspot.ca/2014/01/the-windows-7-event-log-and-usb-device.html.
Post #7312
« Prev Topic | Next Topic »


Permissions Expand / Collapse

All times are GMT -5:00, Time now is 6:57pm