Video Screencast Help

Files written to USB drives detailed log

Created: 31 Aug 2009 • Updated: 04 Feb 2013 | 9 comments
mallcop's picture
19 Agree
1 Disagree
+18 20 Votes
Login to vote
Status: Implemented

Hi guys,

I have set up a policy that logs the files written to the USB drives. Is it possible to have in the future versions a field that contains the detailed write event that occured for that policy(ex: File copy, File delete...)

Regards,
Raul

Comments 9 CommentsJump to latest comment

Rafeeq's picture

Hope this gets implimented very soon

0
Login to vote
AravindKM's picture

Good idea

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

0
Login to vote
shp's picture

Good Idea.........
It will be very helpful to implement more security on data leak in our environment.

Regards,
Srinivas H.P.
HCL Infosystems Ltd

0
Login to vote
Jabed Hasan's picture

yes it will be very helpful

0
Login to vote
brav's picture

We currently use a program from Checkpoint called Removable Media Manager. This provides a detailed link of file actions performed on removable media.

However , this software can also block any devices attached to your machine ( which it does at random ) If this was incorporated into SEP then we wouldn't need this software and could stop paying support for it.

We would also love Symantec very much :+)

m00

0
Login to vote
Mithun Sanghavi's picture

Hello,

Even I am looking for the same ... Hope that comes into SEP soon...

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

0
Login to vote
jomargonzales's picture

This is a good idea. This will avoid in purchasing another product such as DLP.

Jomar Gonzales

0
Login to vote
Doug Fisher's picture

This would be very helpful. I was just inquiring about this very thing to Symantec and was told to submit an idea.
It would be helpful for tracking to know the details of the logs.
If it was deleted, modified, copied etc.
It would also be helpful to know what some of the logged users are. EX: log write to usb (user:SYSTEM, 0, 1, pdf,etc.   E:\text.txt.
Sometimes you get some users that supposedly write to a usb but not sure who the user is when it is 0,1, pft. jpg etc.
Lets hope they give us this detailed log files. 

0
Login to vote
Elisha's picture

This was implemented in SEP 12.1

0
Login to vote