We have a SIEM. We receive logs from SEP to SIEM. However, for the application and device control logs, we don't receive serial numbers of the USB devices. We were told that it is not possible/not designed. Please, consider additing the information.
↧