Security Compliance

SEM USB File Auditing filter conditions

This article provides the default conditions used for the USB File Auditing filter under the Change Management section.

First published date

10/17/2018 1:24 PM

Last published date

10/17/2018 1:24 PM

Overview

This article provides the default conditions used for the USB File Auditing filter under the Change Management section in Security Event Manager (formerly Log & Event Manager).

Product section

Security Event Manager

Resolution

Name: USB File Auditing

Conditions: File Audit Alerts.ProvideSID= *USB*

See Default SEM filter conditions on the Web Console Monitor page for a full list of available default filters in SEM.

Disclaimer: Please note, any content posted herein is provided as a suggestion or recommendation to you for your internal use. This is not part of the SolarWinds software or documentation that you purchased from SolarWinds, and the information set forth herein may come from third parties. Your organization should internally review and assess to what extent, if any, such custom scripts or recommendations will be incorporated into your environment. You elect to use third-party content at your own risk, and you will be solely responsible for the incorporation of the same if any.