Hi all
I want to find anyone using USB device without administrator permission.
I want to find both Linux & Windows users
Please anyone help me to find out the solution
Regards
Jeyachandran
Printable View
Hi all
I want to find anyone using USB device without administrator permission.
I want to find both Linux & Windows users
Please anyone help me to find out the solution
Regards
Jeyachandran
Hi,
You need to provide a lot more information about your environment and what exactly you want to monitor. Also, don't expect too many helpful replies for Windows solutions in a Linux forum.
Though I haven't tried such things by myself. I think you should able to write some scripts and send mail to admin when such events happen.checkout these links :
linux - Using udev rules to run a script on USB insertion - Super User
udev-notify - Visual hardware notifications for Ubuntu
I was thinking along the same lines as Lakshmipathi, udev is good here.
Also, you may want to read up on auditd, the user-space daemon that is part of the very robust Linux Audit System. Here is a link to the auditd man page. It can be tricky to set up, though.
Also note that you can probably get you want merely by setting up rsyslog on all your Linux boxes. You can configure them to all send their /var/log/messages log files to a central syslog server under your control. Each server you monitor can have its own log file on the central server. Then have some process read those log files looking for USB-device related events (which will be in there, if a USB device is plugged in).