Event ID: 6416A new external device was recognized by the system.
A new external device was recognized by the system. Subject: Security ID: %1 Account Name: %2 Account Domain: %3 Logon ID: %4 Class ID: %5 Vendor IDs: %6 Compatible IDs: %7 Location Information: %8
This event generates every time a new external device is recognized by a system.
This event generates, for example, when a new external device is connected or enabled.
Always enable auditing of this sub category.
Lookup Audit Policy Configuration Settings
C:\> AuditPol.exe /get /category:"Detailed Tracking"
LEFT/RIGHT arrow keys for navigationBack to List