Nessus can do this for you with a credentialed audit: http://blog.tenablesecurity.com/2009/03/usb-device-history-auditing-with-nessus.html (Screen shots are from the older pre-Nessus42 interface)
If you want to do this in real time, most SIM agents (such as our Windows client for the Log Correlation Engine) let you do this in real time. Ron Gula http://www.tenablesecurity.com On 1/27/2010 6:43 PM, Tim Mugherini wrote: > http://download.cnet.com/DeviceLock-Plug-and-Play-Auditor/3000-2086_4-10455626.html?part=dl-DeviceLoc&subj=dl&tag=button > > http://www.nirsoft.net/utils/usb_devices_view.html > > > > On Wed, Jan 27, 2010 at 6:34 PM, <[email protected]> wrote: >> >>> Anyone have any recommendations on software that will dump out info such >>> as >>> USB drives connect to, etc? >>> >>> >> >> http://blog.commandlinekungfu.com/2010/01/episode-77-usb-history.html >> >> -- >> byte_bucket >> >> _______________________________________________ >> Pauldotcom mailing list >> [email protected] >> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom >> Main Web Site: http://pauldotcom.com >> > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > -- Ron Gula, CEO Tenable Network Security _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
