Removable storage auditing guide

ADAudit Plus monitors and reports on the use of removable storage devices in a network, including USB flash drives, external hard drives, mobile phones, CDs, DVDs, micro-SD cards, WPD devices, etc.

With ADAudit Plus' removable storage auditing feature, you can:

• Detect when USB devices are plugged in to devices in your network
• Track file accesses and modifications in USB devices
• Monitor and report on files that were copied and pasted to and from USBs
• Ensure compliance with IT regulations like HIPAA and GDPR

Depending on the Windows OS version, the following events pertaining to removable storage devices can be audited and reported on by ADAudit Plus:

• File Read
• File Modified
• File Copy and Paste
• Removable Device Plug In

Difference between agent-based and agentless mode of removable device auditing

It is strongly recommended to opt for agent-based removable storage device auditing over the agentless mode. The table below highlights the difference between the modes and elucidates why the agent-based mode is preferable.

This guide takes you through the process of setting up USB Storage Auditing in ADAudit Plus and configuring your audit policies for complete visibility into file actions in removable storage devices.