Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Endpoint Standard: What Type of USB Devices Can Device Management be Used With?

Endpoint Standard: What Type of USB Devices Can Device Management be Used With?

Environment

  • Endpoint Standard Windows Sensor: 3.6.0.1897 and Higher
  • Endpoint Standard MacOS Sensor: 3.5.3.82 and Higher

Question

What type of devices does the Device Management feature support?

Answer

For Windows

  • Either the device interface class registered as GUID_DEVINTERFACE_DISK - reference-link
  • OR Device Instance ID starts with “Disk” within USBStor - reference-link
  • Support Grid Below 
    Device TypeOS Device TypeInterface TypeSupported?
    USB Flash DriveDiskUSBYes
    Built in SD Card SlotDiskUnknown No
    USB SD Card ReaderDiskUSBYes
    USB External Hard DiskDiskUSBYes
    Built In CDROMCDROMUnknownNo
    USB External CDROMCDROMUSBNo
    USB External Floppy DiskDISKSCSINo
    USB Magnetic OpticalUnknownUnknownNo
For MacOS
  • The device has mountable volume (generates volume mount attempt intercept)
  • AND the device is presented as external,
  • AND the device is presented as USB bus device.
  • Support Grid Below 
    Device TypeMountable VolumeTypeSupported?
    USB Flash DriveYesUSBYes
    USB SD Card ReaderYesUSBYes
    USB External Hard DiskYesUSB Yes
    USB External CDROMYesUSBYes
    USB External Floppy DiskYesUnknownPartial(Block Supported)
    USB Magnetic OpticalUnknownUnknownNot Tested

 

Related Content


Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-18-2023
Views:
273
Contributors