USB monitoring software

[vinjar23 at gmail.com (vinjar23 at gmail.com)]

We use devicelock...


Sent from my Verizon Wireless BlackBerry

-----Original Message-----
From: "Raffi Jamgotchian" <raffi at flossyourmind.com>
Date: Thu, 28 Jan 2010 11:07:21 
To: 'PaulDotCom Security Weekly Mailing List'<pauldotcom at mail.pauldotcom.com>
Subject: Re: [Pauldotcom] USB monitoring software

Thanks for the suggestions. I've dumped the existing data using the methods
listed and now I'm looking at products that can actually lock down and/or
monitor the actual usage (ie. What files are copied, etc). Besides
Lumension, I'm looking at GFI's endpoint security (really cheap).

-----Original Message-----
From: pauldotcom-bounces at mail.pauldotcom.com
[mailto:pauldotcom-bounces at mail.pauldotcom.com] On Behalf Of Ron Gula
Sent: Thursday, January 28, 2010 9:43 AM
To: PaulDotCom Security Weekly Mailing List
Subject: Re: [Pauldotcom] USB monitoring software

Nessus can do this for you with a credentialed audit:

http://blog.tenablesecurity.com/2009/03/usb-device-history-auditing-with-nes
sus.html
(Screen shots are from the older pre-Nessus42 interface)

If you want to do this in real time, most SIM agents (such as our Windows
client for the Log Correlation Engine) let you do this in real time.

Ron Gula
http://www.tenablesecurity.com


On 1/27/2010 6:43 PM, Tim Mugherini wrote:
> http://download.cnet.com/DeviceLock-Plug-and-Play-Auditor/3000-2086_4-
> 10455626.html?part=dl-DeviceLoc&subj=dl&tag=button
>
> http://www.nirsoft.net/utils/usb_devices_view.html
>
>
>
> On Wed, Jan 27, 2010 at 6:34 PM,  <byte.bucket at 4a44.com> wrote:
> > > Anyone have any recommendations on software that will dump out info 
> > > such as USB drives connect to, etc?
> >
> > http://blog.commandlinekungfu.com/2010/01/episode-77-usb-history.html
> >
> > --
> > byte_bucket
> >
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com


--
Ron Gula, CEO
Tenable Network Security


_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com

_______________________________________________
Pauldotcom mailing list
Pauldotcom at mail.pauldotcom.com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com