The active response takes place after you're getting the event data. If you're getting the data for attach/detach you should theoretically get data for the file transfers as well.
Are you search for specific events (such as File Audit) or just all events from the USB Defender tool alias?
I can't recall that I've checked file events between a VDI and thin client so maybe someone else has experience in that regard.