USB Device Plugged

Last updated on:

About the rule

Rule Type

Standard

Rule Description

Detects plugged/unplugged USB devices

Severity

Attention

Rule Requirement

Criteria

Action1: actionname = "USB Device Plugged in Driver Framework" select Action1.HOSTNAME,Action1.MESSAGE,Action1.VENDORNAME,Action1.OBJECTNAME

Detection

Execution Mode

realtime

Log Sources

Windows

Author

Florian Roth (Nextron Systems)