Can I allow specific approved USB drives while blocking others?

Yes, the skill provides workflows for whitelisting specific devices using their Hardware IDs, Vendor IDs (VID), and Product IDs (PID).

Will this skill block my USB keyboard or mouse?

No, the skill focuses on the Mass Storage device class. It includes specific guidance to avoid blocking Human Interface Devices (HID) like keyboards, mice, and printers.

Which management platforms does this skill support?

It includes implementation patterns for Windows Group Policy (GPO), Microsoft Intune, and EDR platforms like Microsoft Defender for Endpoint and CrowdStrike.

Does this help with compliance audits?

Yes, implementing these policies helps satisfy requirements for removable media control found in frameworks like PCI DSS, HIPAA, and NIST 800-53.

USB Device Control Policy Implementation

Name: USB Device Control Policy Implementation
Author: micsapp

bymicsapp

0•

Seguridad y Pruebas

Implements granular USB device control policies across endpoints to prevent data exfiltration and mitigate malware risks from unauthorized removable media.

This skill provides a comprehensive framework for securing organizational endpoints against USB-based threats by enforcing strict device control policies. It guides users through the process of inventorying connected devices via PowerShell, configuring Group Policy Objects (GPO) for granular access, and deploying XML-based policies through Microsoft Defender for Endpoint or Intune. By enabling hardware-specific whitelisting (VID/PID) while blocking generic mass storage classes, this skill helps security teams meet rigorous compliance standards like PCI DSS and HIPAA without disrupting essential peripherals like keyboards or mice.

Características Principales

01Microsoft Defender for Endpoint (MDE) XML policy generation

020 GitHub stars

03PowerShell scripts for USB device inventory and history enumeration

04Audit and monitoring strategies for USB-related security events

05GPO templates for granular removable storage access restrictions

06Hardware-specific whitelisting using VID/PID and Instance IDs

Casos de Uso

01Achieving regulatory compliance for removable media control in regulated industries

02Establishing a whitelist for authorized, encrypted USB devices for field personnel

03Hardening corporate endpoints to prevent unauthorized data transfer to personal drives

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills implementing-usb-device-control-policy

For use in Claude.ai and ChatGPT

Características Principales

01Microsoft Defender for Endpoint (MDE) XML policy generation

020 GitHub stars

03PowerShell scripts for USB device inventory and history enumeration

04Audit and monitoring strategies for USB-related security events

05GPO templates for granular removable storage access restrictions

06Hardware-specific whitelisting using VID/PID and Instance IDs

Casos de Uso

01Achieving regulatory compliance for removable media control in regulated industries

02Establishing a whitelist for authorized, encrypted USB devices for field personnel

03Hardening corporate endpoints to prevent unauthorized data transfer to personal drives

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add micsapp/micstec-skills implementing-usb-device-control-policy

For use in Claude.ai and ChatGPT