Please advise if McAfee DLP is able to detect USB removal froma PC.
The reason I’m asking, is because there is one university ITmanager who’s complaining from students removing
the keyboard and adding a hardware key logger to sniff datainput of professors.
For my USB Sticks i get events for "Device unplug".
For your problem, i suppose that the keyloggers are considered as PnP USB devices, and those are blocked by the default policy (block everything except XYZ..), so the Keylogger wouldnt work.
Personally i haven't tried Hardware key loggers, but as the customer informed me that they are seemless and they act like a wire, hence they do not show in the device manager.