I can help you with this, but I am wondering if you are considering the entire scenario. I assume that you want to be alerted when someone who is leaving the organization is attempting to take company data with them, correct? Are you only interested in USB devices? What about cloud storage? What about burnable cd/dvds? How about E-Mail? I only ask because maybe you want to make the rule a little tighter than just USB devices? Then again, maybe not. Let me know and I'll work up the rule for you.
↧