Block users or groups from installing or using unapproved hardware on systems, including USB devices.
Domain | ID | Name | Use | |
---|---|---|---|---|
Enterprise | T1052 | Exfiltration Over Physical Medium |
Limit the use of USB devices and removable media within a network. |
|
.001 | Exfiltration over USB |
Limit the use of USB devices and removable media within a network. |
||
Enterprise | T1200 | Hardware Additions |
Block unknown devices and accessories by endpoint security configuration and monitoring agent. |
|
Enterprise | T1091 | Replication Through Removable Media |
Limit the use of USB devices and removable media within a network. |