USB Monitoring Tools Linux or Win (Freeware)
-
@scottalanmiller said in USB Monitoring Tools Linux or Win (Freeware):
Did a solution get found for this?
No idea. I'm so confused about the whole thing.
-
Maybe Netwrix or something would be good. Although they aren't free (last I knew.)
-
@nerdydad said in USB Monitoring Tools Linux or Win (Freeware):
from above, we went down the windows road with you and suggested GPO, which you can pull reports from if you know where
Sounds like auditing needs to be enabled (a GPO thing) then logs collected from all endpoints, then reports made that look at those logs to show you the data you want. Something like Elk might be able to house the logs centrally and generate the reports you want.
-
@nagendra said in USB Monitoring Tools Linux or Win (Freeware):
am looking for a USB Monitoring Tools .. GPO does not monitor the USB it just lock the USB and we are not sure if it has pushed the policy in artist machine..
Logging will tell you this.
suppose i have disable USB in all network machines .. when we get a request to enable USB for important artist for few days later when we enabled USB lock it wont work
Why won't enabling locking work?
-
@scottalanmiller sorry i could not reply back .. am looking for free version paid one i tried GFI Endpoint security already its good.
-
@dashrender Thanks Dashrender but checking everytime in event log viewer is very painful. like if any one tried to connect a pen drive we shud get a email alert or some kind of msg triggering system would be very helpful.
example : GFI Endpoint security
-
@nagendra if I have understood it correctly try Comodo One Monitoring tools, ( https://one.comodo.com/rmm.php ) and its Free. if you haven't found any solutions, Hope it helps.
-
@malli085 said in USB Monitoring Tools Linux or Win (Freeware):
Comodo One Monitoring tools
Thanks @Malli085 but this is cloud based i need offline sorry i didn't mentioned previously.
-
@nagendra thats okay, anyways!
-
@nagendra said in USB Monitoring Tools Linux or Win (Freeware):
@dashrender Thanks Dashrender but checking everytime in event log viewer is very painful. like if any one tried to connect a pen drive we shud get a email alert or some kind of msg triggering system would be very helpful.
example : GFI Endpoint security
I specifically told you how to get an email, by monitoring the logs with something like ELK. It has rules that will do things based on events in the collected logs.
-
@Dashrender sure i will check ELK ..
-
@nagendra said in USB Monitoring Tools Linux or Win (Freeware):
@Dashrender sure i will check ELK ..
Or Graylog, similar but a little easier than ELK.
-
@scottalanmiller said in USB Monitoring Tools Linux or Win (Freeware):
@nagendra said in USB Monitoring Tools Linux or Win (Freeware):
@Dashrender sure i will check ELK ..
Or Graylog, similar but a little easier than ELK.
Especially for alerting. The alert streams are super easy to set up and get running. Plus the dashboards are a lot easier.
-
Also since everyone was confused at the beginning about whether this was Linux or Windows, there is a utility for Linux called USBGuard. It will only allow trusted USB devices based on a white list and log all attempts. It's easy to automate also.
-
@scottalanmiller Thanks Scot... thanks everyone will find these solutions