Announcement

Collapse
No announcement yet.

Audit USB Connection

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Audit USB Connection

    Hi,

    I would like to audit all USB connections made to a client machine. I have tried turning on registry auditing for the following key
    HKLM\System\ CurrentControlSet\Enum\ USBSTOR. I have followed the steps closely shown here - http://www.winxptutor.com/auditreg.htm to enable registry auditing.

    The auditing works fine and an entry was written into the seccurity log, but it is only for 1 instance. Subsequent USB connection with the same USB drive and on the same USB port does not have any more entries written into the security log.

    I would like to have to constant monitoring of all USB connections without using third party tools and only using Windows solution. Is this possible?
Working...
X