[Aide] Monitoring files copy to an USB key

[s4il0r]

https://askubuntu.com/posts/1490845/timeline

Hello everyone

I'm using USBguard to prevent users from connecting an untrusted device to their machines (Ubuntu 22.04).

Once the device is trust, I would like to keep logs of which file is copied to a USB key. I would like to have :

- the username
- the timestamp
- the file name
- the most important for me : the hash of the file

AIDE seems to be very great for this, except that it haven't find how to run a check when a file is copied to an usb key.

Does someone have a clue ?

Or perhaps there is a better tool for my needs ?

Thanks !
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.ipi.fi/pipermail/aide/attachments/20231107/5a997b5f/attachment.htm>