The "USB Mass Storage Detected - Response Playbook" is designed to handle incidents involving unauthorized or suspicious usage of USB mass storage devices on organizational systems. Triggered by the ArcSight ESM rule "USB Mass Storage Detected", the playbook guides analysts through a structured response process to assess the event, engage with relevant stakeholders, and escalate where necessary to mitigate potential security risks.
The "USB Mass Storage Detected - Response Playbook" is designed to handle incidents involving unauthorized or suspicious usage of USB mass storage devices on organizational systems. Triggered by the ArcSight ESM rule "USB Mass Storage Detected", the playbook guides analysts through a structured response process to assess the event, engage with relevant stakeholders, and escalate where necessary to mitigate potential security risks.
Please upgrade to one of the following broswers: Internet Explorer 11 (or greater) or the latest version of Chrome or Firefox