USB Device Plugged

Last updated on:

About the rule

Rule Type

Standard

Rule Description

Detects plugged/unplugged USB devices

Severity

Attention

Rule Requirement

Criteria

Action1: actionname = "USB Device Plugged in Driver Framework" select Action1.HOSTNAME,Action1.MESSAGE,Action1.VENDORNAME,Action1.OBJECTNAME,Action1.DOMAIN,Action1.OBJECTTYPE,Action1.USERNAME

Detection

Execution Mode

realtime

Log Sources

Windows

Author

Florian Roth (Nextron Systems)