Video Screencast Help
Symantec Secure Login will be live on Connect starting February 25. Get the details here.

Files written to USB drives detailed log

Created: 31 Aug 2009 • Updated: 04 Feb 2013 | 9 comments
mallcop's picture
19 Agree
1 Disagree
+18 20 Votes
Login to vote
Status: Implemented

Hi guys,

I have set up a policy that logs the files written to the USB drives. Is it possible to have in the future versions a field that contains the detailed write event that occured for that policy(ex: File copy, File delete...)


Comments 9 CommentsJump to latest comment

Rafeeq's picture

Hope this gets implimented very soon

Login to vote
AravindKM's picture

Good idea

Please don't forget to mark your thread solved with whatever answer helped you : ) Thanks & Regards Aravind

Login to vote
shp's picture

Good Idea.........
It will be very helpful to implement more security on data leak in our environment.

Srinivas H.P.
HCL Infosystems Ltd

Login to vote
Jabed Hasan's picture

yes it will be very helpful

Login to vote
brav's picture

We currently use a program from Checkpoint called Removable Media Manager. This provides a detailed link of file actions performed on removable media.

However , this software can also block any devices attached to your machine ( which it does at random ) If this was incorporated into SEP then we wouldn't need this software and could stop paying support for it.

We would also love Symantec very much :+)


Login to vote
Mithun Sanghavi's picture


Even I am looking for the same ... Hope that comes into SEP soon...

Mithun Sanghavi
Associate Security Architect


Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Login to vote
jomargonzales's picture

This is a good idea. This will avoid in purchasing another product such as DLP.

Jomar Gonzales

Login to vote
Doug Fisher's picture

This would be very helpful. I was just inquiring about this very thing to Symantec and was told to submit an idea.
It would be helpful for tracking to know the details of the logs.
If it was deleted, modified, copied etc.
It would also be helpful to know what some of the logged users are. EX: log write to usb (user:SYSTEM, 0, 1, pdf,etc.   E:\text.txt.
Sometimes you get some users that supposedly write to a usb but not sure who the user is when it is 0,1, pft. jpg etc.
Lets hope they give us this detailed log files. 

Login to vote
Elisha's picture

This was implemented in SEP 12.1

Login to vote