Removable storage auditing guide

ADAudit Plus monitors and reports on the use of removable storage devices in a network, including USB flash drives, external hard drives, mobile phones, CDs, DVDs, micro-SD cards, WPD devices, etc.

With ADAudit Plus' removable storage auditing feature, you can:

  • Detect when USB devices are plugged in to devices in your network
  • Track file accesses and modifications in USB devices
  • Monitor and report on files that were copied and pasted to and from USBs
  • Ensure compliance with IT regulations like HIPAA and GDPR

Depending on the Windows OS version, the following events pertaining to removable storage devices can be audited and reported on by ADAudit Plus:

  • File Read
  • File Modified
  • File Copy and Paste
  • Removable Device Plug In
Note: The first three events can be audited on Windows 8 and above, and Windows Server 2012 and above. Auditing for Removable Device Plug In is only available for Windows 10/Windows server 2016 and above.

This guide takes you through the process of setting up USB Storage Auditing in ADAudit Plus and configuring your audit policies for complete visibility into file actions in removable storage devices. 

我们的客户