Discover potential security risks caused by external USB drives. While USB drives can be useful for transferring files. In a modern network environment, with the improvements to LAN speeds and shared drives USB drives have mostly been replaced. However, if USB drives are used they are also very useful to spread malware or spyware from a home office to a corporate network.
Detecting USB drives can be used to enforce company policies regarding USB drive usage, or to detect the source of potentially harmful files found.
External USB Drives Report Query
Select Top 1000000 tsysOS.Image As icon,
tblAssets.AssetID,
tblAssets.AssetName,
tblFloppy.Manufacturer As [Drive Manufacturer],
tblFloppy.Model As [Drive Model],
tblFloppy.Size,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
tblAssets.IPAddress,
tblAssets.Description,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tblAssetCustom.Location,
tsysIPLocations.IPLocation,
tsysOS.OSname As OS,
tblAssets.SP As SP,
tblAssets.Firstseen,
tblAssets.Lastseen
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tblFloppy On tblAssets.AssetID = tblFloppy.AssetID
Left Outer Join tsysOS On tblAssets.OScode = tsysOS.OScode
Left Join tsysIPLocations On tblAssets.LocationID = tsysIPLocations.LocationID
Where tblAssetCustom.State = 1 And tblFloppy.InterfaceType = N'USB'
Order By tblAssets.AssetName