1 of 1 people found this helpful
there is a Signature implemented which can Block USB Devices but you can not use it to unblock when the Device was Scanned by VSE for instance.
HIP Signature 1157 - USB Storage Inserted
but that does not help in my case as its going to block all USB usage.
I want the USB to be scanned then blocked if something found.
Sorry but it will not be working with Hips as this would need a Dynamic Block Rule which only gets active when VSE would tell to HIP it has found Malware and the device needs to be Quarantined/Blocked.
An automatic ODS Scan of the inserted USB Drive would be helpful but as far as i know there is no builtin option yet.
With the above said feel free to submit a Feature Addition to VSE for example:
This functionality is actually is more aligned with data leakage than host intrusion prevention. I'd suggest checking McAfee DLP for the feature.