Elastic Agent USB Locking Feature

Is there any feature like we have in antivirus to lock usb devices from plugging in Elastic Agent?

Hi @ali.sharjeel ,

We do not have the feature available just yet. It's something on our radar though.

In the mean time, we do have ways of detected USB devices using our OSQuery manager integration, coupled with something like our New Terms query type.


Hi James, Can we execute script through Elastic Agent on the agents. Is that possible like we have a usb blocking script for windows and if we get an alert usb detected we can take actions through Tines and execute that script blocking script.

Not quite yet, but it's also on our radar (and much higher priority than device blocking :wink: )

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.