USB Qurilmalar Xavfsizligi va Monitoringi
UsbMonitor driver va Agent ulanishlar real-vaqt logi hamda Oq/Qora ro'yxat qoidalarini shakllantirish moduli
USB Qoidalar va Siyosat Rejimi Aktiv Siyosat
Har bir foydalanuvchi SID va Registry kalitlari orqali qurilmalar ruxsati boshqariladi.
Oq ro'yxat rejimi faol: Faqat Doimiy va Oq ro'yxatdagi (VID_PID / Serial No) qurilmalarga ruxsat beriladi. Noma'lum va ro'yxatda bo'lmagan barcha ulanuvchi USB qurilmalar UsbMonitor drayveri tomonidan avtomatik bloklanadi.
Qora ro'yxat rejimi faol: Qora ro'yxatda bor qurilmalar (VID_PID / Serial No) qat'iy bloklanadi. Qolgan barcha ulanadigan har qanday yangi USB qurilmalarga ruxsat beriladi.
| Qurilma Nomi | VID & PID | Seriya Raqami | Foydalanuvchi Scope (SID & Registry) | Qoida Turi | Holati | Amallar |
|---|---|---|---|---|---|---|
|
Kingston DataTraveler 3.0
Mass Storage Device
|
VID_0951 & PID_1666 | 0018F3D78A22F091 |
Eshniyozov Temur
S-1-5-21-3623811015-3361044343-4030086473-1001
|
Doimiy Ruxsat | Faol | |
|
SanDisk Ultra Flair USB 3.0
Encrypted Flash Drive
|
VID_0781 & PID_5581 | 4C530001250912117542 |
Karimov Jasur
S-1-5-21-3623811015-3361044343-4030086473-1004
|
Oq Ro'yxat (Whitelist) | Faol | |
|
Generic Unverified USB Mass Storage
Noma'lum USB Tashqi Xotira
|
VID_13FE & PID_4100 | BAD_SERIAL_99410A |
Barcha Foydalanuvchilar (Global Scope)
HKLM\SOFTWARE\Policies\DLP\USB
|
Qora Ro'yxat (Blacklist) | Bloklangan |
UsbMonitor Driver Real-Time Ulanish Hodisalari
Ulangan har bir USB qurilmaning VID_PID, Serial, composite tarkibi va drayver bergan ruxsat/blok qarorlari
| Sana & Vaqt | Kompyuter & User SID | Qurilma Nomi | VID & PID (Composite Details) | Seriya Raqami | Holati | Drayver Qarori | Tezkor Harakat |
|---|---|---|---|---|---|---|---|
| 2026-08-07 07:14:02 |
PC-DEVELOPER-01
S-1-5-21-3623811015-1001 (Temur E.)
|
Kingston DataTraveler 3.0 |
VID_0951 & PID_1666
Composite: Mass Storage + SCSI Interface
|
0018F3D78A22F091 | Ulangan (Connected) | Ruxsat Berildi (Allowed) | |
| 2026-08-07 07:11:15 |
WORKSTATION-FINANCE
S-1-5-21-3623811015-1008 (Nodira S.)
|
Unknown Non-Standard Flash Disk |
VID_13FE & PID_4100
Composite: Raw USB Storage Endpoint
|
BAD_SERIAL_99410A | Ulangan (Connected) | Bloklandi (Blocked) | |
| 2026-08-07 07:05:40 |
PC-DEVELOPER-01
S-1-5-21-3623811015-1001 (Temur E.)
|
SanDisk Ultra Flair USB 3.0 |
VID_0781 & PID_5581
Single Volume USB Disk
|
4C530001250912117542 | Uzilgan (Disconnected) | Ruxsat Berildi (Allowed) |
UsbMonitor Driver System Services Status (SystemID: 4)
DLP agenti har bir USB modulini alohida servis sifatida `SystemID 4` (NT AUTHORITY\SYSTEM) darajasida xavfsiz ishlatadi.
USB ulanishlarni apparat darajasida ushlash va bloklash filter drayveri.
Backenddan olingan Oq/Qora ro'yxatlarni User SID bo'yicha registryga yozuvchi modul.
Ulanish loglarini va debug ogohlantirishlarini saqlovchi xavfsiz log servisi.