Audit all USB plugins and file activities in removable storage devices for all configured Windows domain controllers, servers, and workstations using the supported OS versions.
To add and set up audit policies for Windows domain controller auditing, follow the steps in this guide.
| Category | Sub Category | Audit Events |
|---|---|---|
| Object Access | Audit Removable Storage | Success and Failure |
| Detailed Tracking | Audit PNP Activity | Success and Failure |
To add and set up audit policies for real-time Windows server auditing and change analytics, follow the steps in this guide.
| Category | Sub Category | Audit Events |
|---|---|---|
| Object Access | Audit Removable Storage | Success and Failure |
| Detailed Tracking | Audit PNP Activity | Success and Failure |
To add and configure audit policies for workstation auditing, follow the steps in this guide.
| Category | Sub Category | Audit Events |
|---|---|---|
| Object Access | Audit Removable Storage | Success and Failure |
| Detailed Tracking | Audit PNP Activity | Success and Failure |
