# Elastic Agent USB Locking Feature

**URL:** <https://discuss.elastic.co/t/elastic-agent-usb-locking-feature/327323>\
**Category:** Elastic Security\
**Created:** [March 9, 2023, 6:33am UTC](https://discuss.elastic.co/t/elastic-agent-usb-locking-feature/327323 "2023-03-09T06:33:07Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![ali.sharjeel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ali.sharjeel/32/118043_2.png) [@ali.sharjeel](https://discuss.elastic.co/u/ali.sharjeel)\
**Post date:** [March 9, 2023, 6:33am UTC](https://discuss.elastic.co/t/elastic-agent-usb-locking-feature/327323/1 "2023-03-09T06:33:07Z")

</div>

Is there any feature like we have in antivirus to lock usb devices from plugging in Elastic Agent?

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [March 9, 2023, 10:10pm UTC](https://discuss.elastic.co/t/elastic-agent-usb-locking-feature/327323/2 "2023-03-09T22:10:00Z")

</div>

Hi @ali.sharjeel ,

We do not have the feature available just yet. It's something on our radar though.

In the mean time, we do have ways of detected USB devices using our OSQuery manager integration, coupled with something like our New Terms query type.

James

---

<div class="post-metadata">

**Author:** ![ali.sharjeel](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ali.sharjeel/32/118043_2.png) [@ali.sharjeel](https://discuss.elastic.co/u/ali.sharjeel)\
**Post date:** [March 10, 2023, 6:57am UTC](https://discuss.elastic.co/t/elastic-agent-usb-locking-feature/327323/3 "2023-03-10T06:57:08Z")

</div>

Hi James, Can we execute script through Elastic Agent on the agents. Is that possible like we have a usb blocking script for windows and if we get an alert usb detected we can take actions through Tines and execute that script blocking script.

---

<div class="post-metadata">

**Author:** ![jamesspi](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jamesspi/32/24479_2.png) [@jamesspi](https://discuss.elastic.co/u/jamesspi)\
**Post date:** [March 10, 2023, 11:43pm UTC](https://discuss.elastic.co/t/elastic-agent-usb-locking-feature/327323/4 "2023-03-10T23:43:53Z")

</div>

Not quite yet, but it's also on our radar (and much higher priority than device blocking 😉 )

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 7, 2023, 11:44pm UTC](https://discuss.elastic.co/t/elastic-agent-usb-locking-feature/327323/5 "2023-04-07T23:44:48Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.