Skip to main content

Device Control in Malwarebytes Nebula

The Device Control page in Malwarebytes Nebula displays the action taken on USB drives connected to endpoints in the last 90 days. 

Device control data is historical so items cannot be deleted from this page. Historical data shows read-only or blocked items based on the policy settings. To configure Device Control, see Configure Protection settings in Malwarebytes Nebula.

View and sort data

The main area of the Device Control screen shows the list of all quarantined threat data. Each column can be filtered to narrow the results. You can customize data in the results list in the following ways:

  • Click Add / Remove Columns above the results list to choose which columns to display.
  • Drag and drop certain column headers to the results bar to group data by those parameters.
  • Use the filters Filter_Icon.png in the column headers to view specific data.
  • Hover your cursor over a column header to reveal a hamburger icon Column_Pinning.png with options to pin and auto-size columns.

Click on a column filter icon Filter_Icon.png to narrow the results. When clicking on the filter icon, the filter list at the top of the screen shows which filters are applied. Click on a filtered item to remove it, or Clear Filters to remove them all.

Export data

To download data to your local machine:

  1. Select all or check specific boxes for the rows you want to export.
  2. At the top-right of the Vulnerabilities page, click Export.

Expand device control details

Under the Name column, click one of the device names to view more details. In the Device Control Details window, you can view the following information:

  • Date: Date and time of the USB device controlled event.
  • Manufacturer: The manufacturer of the USB device.
  • Device: The name of the USB device.
  • Action Taken: Shows limited or blocked access to the USB device.
  • Endpoint: Click the endpoint name to go to the Overview page for the endpoint.
  • Serial number: The serial number of the USB device.
  • Volume name: The drive letter for this USB device on the endpoint.
  • Disk interface: Type of drive connected.
  • File system: File system of the USB device.

 

Return to the Malwarebytes Nebula Administrator Guide.

Related articles