External Disk Drive Or USB Storage Device Was Recognized By The System (f69a87ea-955e-4fb4-adb2-bb9fd6685632)

Detects external disk drives or plugged-in USB devices.

Cluster A	Galaxy A	Cluster B	Galaxy B	Level
External Disk Drive Or USB Storage Device Was Recognized By The System (f69a87ea-955e-4fb4-adb2-bb9fd6685632)	Sigma-Rules	Replication Through Removable Media - T1091 (3b744087-9945-4a6f-91e8-9dbceda417a4)	Attack Pattern	1
External Disk Drive Or USB Storage Device Was Recognized By The System (f69a87ea-955e-4fb4-adb2-bb9fd6685632)	Sigma-Rules	Hardware Additions - T1200 (d40239b3-05ff-46d8-9bdd-b46d13463ef9)	Attack Pattern	1