Did you ever get an answer to this?
If you have an ePO-Server connected you can build a Query over all these USB Memory Stick that are connected.
If you are interested in the Syntax, i will retrieve it....
Felder Detail Ergebnistyp: DLP-Ereignisse. Kriterien:
(Ereigniskategorie Ist gleich Nicht-Verwaltungsereignis und Ziel Enthält "usb")
If you have it I would very much appreciate it. We have been hitting our heads against the wall trying to figure out a way. Thank you.
This is how I solved the issue. You can add to it by joining the table over and over again, to itself.
,ETV1.[EvidenceValue] AS VID
,ETV2.[EvidenceValue] As PID
,ETV3.[EvidenceValue] AS Volume_Label
FROM [ePO_HQS-IS-EPOL].[dbo].[DLP_EvidenceTypeAndValue] ETV1, [ePO_HQS-IS-EPOL].[dbo].[DLP_EvidenceTypeAndValue] ETV2, [ePO_HQS-IS-EPOL].[dbo].[DLP_EvidenceTypeAndValue] ETV3
INNER JOIN [ePO_HQS-IS-EPOL].[dbo].[DLP_EventView] EV ON EV.EventRowID = ETV3.[EventRowID]
WHERE ETV1.[EventRowID] = ETV2.[EventRowID] AND ETV1.[EventRowID] = ETV3.[EventRowID]
AND ETV1.EvidenceType = 'Vendor_ID' AND ETV2.EvidenceType = 'Product_ID' AND ETV3.EvidenceType = 'Volume_Label'
AND EventType = '10000'
ORDER BY EventRowID