There are 3 default FRP queries. They can be found from Queries and Reports by expanding McAfee Groups | FRP Queries.
Protection Status: Removable Media
Removable Media Device Events
Thanks for a quick help.
indeed but i am talking about files and folders eccryption events but these all are removable media queries.