Trying to Monitor unapproved USBs in Microsoft Advanced Hunting
I’ve written a query to monitor when a USB is plugged or unplugged from a machine on my network. I want to build it out to not alert if I put the devices serial number in a list.
I’ve written a query to monitor when a USB is plugged or unplugged from a machine on my network. I want to build it out to not alert if I put the devices serial number in a list.