Environment
• Endpoint Standard Web Console: November '20 Release (0.60) and Higher
• Carbon Black Cloud Windows Sensor: 3.6.0.1897 and Higher
Objective
How to Determine USB Hardware IDs?
Resolution
In Windows Device Manager:
- Open “Device Manager”
- Expand “Disk Drives” and find your USB drive
- Right click on your USB drive and select “Properties”
- Select the “Details” tab
- Choose “Parent” from the dropdown
- The detail under “Parent” should look something like the following: USB\VID_0781&PID_5599\4C530000151222113371
- Retrieve VendorID, ProductID, and Serial Number for the desired device. The values are represented in the following manner:
- USB\VID_VENDORID&PID_PRODUCTID\SERIALNUMBER
In Powershell:
- Open “Windows PowerShell”
- Run the following PowerShell command: ((Get-CimInstance -Class win32_PnPSignedDriver) | ?{($_.Description -like '*mass*')}) |Select Description, DeviceClass, DeviceID, Manufacturer
- Retrieve VendorID, ProductID, and Serial Number for the desired device from the command output. The values are represented in the DeviceID column as follows: USB\VID_VENDORID&PID_PRODUCTID\SERIALNUMBER