I would like to know if Mcafee DLP has the capability to generate a daily report providing details of the files copied or transferred using USB devices. If this is possible, could someone point me to a documentation for configuring the report.
it depends on your license. DLP allows to enable "evidence copy". With Device Control policy only you can generate reports including the file count and the amount of files. I generated such queries for a customer using DLP (Device Control). The version we used was 9.3.x or 9.2.x. I´m not absolutely sure which version, but i´m absolutely sure we generated the reports.
At the moment i do not know which details we included in detail.
Just install DLP on a system, generate an event and check what is possible. 🙂
I am interested in knowing the file names only, I will try to did the evidence copy option in device control. Thanks for the quick reply.
If you create device rule, it starts monitoring the device not the files.
You need to create Removable Storage Protection Rule to see the files which are being transferred.
Enable monitor action in it. This will monitor the file which is transferred to pen drive.