Login to participate
Security IdeasRSS
13

Files written to USB drives detailed log

mallcop's picture
14 Agree, 1 Disagree
Status:
In Development

Hi guys,

I have set up a policy that logs the files written to the USB drives. Is it possible to have in the future versions a field that contains the detailed write event that occured for that policy(ex: File copy, File delete...)

Regards,
Raul

Rafeeq's picture

Nice idea Rahul :)

Hope this gets implimented very soon

Please don't forget to mark your thread solved with whatever answer helped you : )
Rafeeq

AravindKM's picture

Good idea

Good idea

Please don't forget to mark your thread solved with whatever answer helped you : )
Thanks & Regards
Aravind

shp's picture

Good Idea......... It will be

Good Idea.........
It will be very helpful to implement more security on data leak in our environment.

Regards,
Srinivas H.P.
HCL Infosystems Ltd

Dream_Chaser's picture

nice

yes it will be very helpful

brav's picture

We currently use a program

We currently use a program from Checkpoint called Removable Media Manager. This provides a detailed link of file actions performed on removable media.

However , this software can also block any devices attached to your machine ( which it does at random ) If this was incorporated into SEP then we wouldn't need this software and could stop paying support for it.

We would also love Symantec very much :+)

m00

Mithun Sanghavi's picture

Even I am looking for the same ...

Hello,

Even I am looking for the same ... Hope that comes into SEP soon...

Thanks and Regards
-----------------------------------------------------
Mithun Sanghavi
Enterprise Product Support Analyst
Microsoft Certified Systems Administrator
Symantec Small Business Security Certified
Enterprise Technical Support
Sym

jomargonzales's picture

Very Good

This is a good idea. This will avoid in purchasing another product such as DLP.

Jomar Gonzales

Doug Fisher's picture

This would be helpful

This would be very helpful. I was just inquiring about this very thing to Symantec and was told to submit an idea.
It would be helpful for tracking to know the details of the logs.
If it was deleted, modified, copied etc.
It would also be helpful to know what some of the logged users are. EX: log write to usb (user:SYSTEM, 0, 1, pdf,etc.   E:\text.txt.
Sometimes you get some users that supposedly write to a usb but not sure who the user is when it is 0,1, pft. jpg etc.
Lets hope they give us this detailed log files.