Thank you Jacob. Appreciate your help.
On Thu, Apr 5, 2018 at 7:29 AM, Jacob Mcgrath
wrote:
> I have not tested on AD controlled Windows 10 as of yet
>
> He is mine its script base and tails from the sid 530
> https://groups.google.com/forum/#!searchin/ossec-list/
> usb$20detection%7Csort:date/
I have not tested on AD controlled Windows 10 as of yet
He is mine its script base and tails from the sid 530
https://groups.google.com/forum/#!searchin/ossec-list/usb$20detection%7Csort:date/ossec-list/9P1wZM78jj4/CvibL-afAgAJ
you would need this in the Windows agent config.
full
