Monitoring USB, CD-ROM and File Systems
Step 1 – Scan Network To Discover Windows Server/Workstations
Step 2 – License Windows Server/Workstations
The Monitoring Group macro “&MG_WINDOWS” contains all licensed Windows machines
Pre-installed Rules implement all the enumerations of removable storage audits.
REL_USB, REL_CD_DVD and REL_FILE_SYSTEM provides the basic monitoring for file system security.
Step 3 – Plug/Unplug some USB drives on the licensed workstation to check that events are correctly fired.
Step 4 – Use pre-installed reports to see who did what, when