Thanks for the suggestions. I've dumped the existing data using the methods listed and now I'm looking at products that can actually lock down and/or monitor the actual usage (ie. What files are copied, etc). Besides Lumension, I'm looking at GFI's endpoint security (really cheap).
-----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Ron Gula Sent: Thursday, January 28, 2010 9:43 AM To: PaulDotCom Security Weekly Mailing List Subject: Re: [Pauldotcom] USB monitoring software Nessus can do this for you with a credentialed audit: http://blog.tenablesecurity.com/2009/03/usb-device-history-auditing-with-nes sus.html (Screen shots are from the older pre-Nessus42 interface) If you want to do this in real time, most SIM agents (such as our Windows client for the Log Correlation Engine) let you do this in real time. Ron Gula http://www.tenablesecurity.com On 1/27/2010 6:43 PM, Tim Mugherini wrote: > http://download.cnet.com/DeviceLock-Plug-and-Play-Auditor/3000-2086_4- > 10455626.html?part=dl-DeviceLoc&subj=dl&tag=button > > http://www.nirsoft.net/utils/usb_devices_view.html > > > > On Wed, Jan 27, 2010 at 6:34 PM, <[email protected]> wrote: >> >>> Anyone have any recommendations on software that will dump out info >>> such as USB drives connect to, etc? >>> >>> >> >> http://blog.commandlinekungfu.com/2010/01/episode-77-usb-history.html >> >> -- >> byte_bucket >> >> _______________________________________________ >> Pauldotcom mailing list >> [email protected] >> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom >> Main Web Site: http://pauldotcom.com >> > _______________________________________________ > Pauldotcom mailing list > [email protected] > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom > Main Web Site: http://pauldotcom.com > -- Ron Gula, CEO Tenable Network Security _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com _______________________________________________ Pauldotcom mailing list [email protected] http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom Main Web Site: http://pauldotcom.com
