it depends on your license. DLP allows to enable "evidence copy". With Device Control policy only you can generate reports including the file count and the amount of files. I generated such queries for a customer using DLP (Device Control). The version we used was 9.3.x or 9.2.x. I´m not absolutely sure which version, but i´m absolutely sure we generated the reports.
At the moment i do not know which details we included in detail.
Just install DLP on a system, generate an event and check what is possible. :-)
Moved to DLP
I am interested in knowing the file names only, I will try to did the evidence copy option in device control. Thanks for the quick reply.
If you create device rule, it starts monitoring the device not the files.
You need to create Removable Storage Protection Rule to see the files which are being transferred.
Enable monitor action in it. This will monitor the file which is transferred to pen drive.