For more information about how to do this, see update drivers in Windows 10. If the device is not yet connected, first install the device-specific driver, such as by using the appropriate installer. After the device-specific driver is installed, Windows 10 will select that driver instead of the standard USB audio 2.0 driver when you. Microsoft Driver Downloads. To find the latest driver for your computer we recommend. (3- HyperX Cloud Stinger Wireless). (10- USB Audio Device) AudioEndpoint.

-->

Applies to:Microsoft Defender for Endpoint

Microsoft recommends a layered approach to securing removable media, and Microsoft Defender for Endpoint provides multiple monitoring and control features to help prevent threats in unauthorized peripherals from compromising your devices:

Discover plug and play connected events for peripherals in Microsoft Defender for Endpoint advanced hunting. Identify or investigate suspicious usage activity.
Configure to allow or block only certain removable devices and prevent threats.
1. Allow or block removable devices based on granular configuration to deny write access to removable disks and approve or deny devices by using USB device IDs. Flexible policy assignment of device installation settings based on an individual or group of Azure Active Directory (Azure AD) users and devices.
2. Prevent threats from removable storage introduced by removable storage devices by enabling:
  - Microsoft Defender Antivirus real-time protection (RTP) to scan removable storage for malware.
  - The Attack Surface Reduction (ASR) USB rule to block untrusted and unsigned processes that run from USB.
  - Direct Memory Access (DMA) protection settings to mitigate DMA attacks, including Kernel DMA Protection for Thunderbolt and blocking DMA until a user signs in.
Create customized alerts and response actions to monitor usage of removable devices based on these plug and play events or any other Microsoft Defender for Endpoint events with custom detection rules.
Respond to threats from peripherals in real-time based on properties reported by each peripheral.

Note

These threat reduction measures help prevent malware from coming into your environment. To protect enterprise data from leaving your environment, you can also configure data loss prevention measures. For example, on Windows 10 devices you can configure BitLocker and Windows Information Protection, which will encrypt company data even if it is stored on a personal device, or use the Storage/RemovableDiskDenyWriteAccess CSP to deny write access to removable disks. Additionally, you can classify and protect files on Windows devices (including their mounted USB devices) by using Microsoft Defender for Endpoint and Azure Information Protection.

Discover plug and play connected events

You can view plug and play connected events in Microsoft Defender for Endpoint advanced hunting to identify suspicious usage activity or perform internal investigations.For examples of Defender for Endpoint advanced hunting queries, see the Microsoft Defender for Endpoint hunting queries GitHub repo.

Sample Power BI report templates are available for Microsoft Defender for Endpoint that you can use for Advanced hunting queries. With these sample templates, including one for device control, you can integrate the power of Advanced hunting into Power BI. See the GitHub repository for PowerBI templates for more information. See Create custom reports using Power BI to learn more about Power BI integration.

Allow or block removable devices

The following table describes the ways Microsoft Defender for Endpoint can allow or block removable devices based on granular configuration.

Control	Description
Restrict USB drives and other peripherals	You can allow/prevent users to install only the USB drives and other peripherals included on a list of authorized/unauthorized devices or device types.
Block installation and usage of removable storage	You can't install or use removable storage.
Allow installation and usage of specifically approved peripherals	You can only install and use approved peripherals that report specific properties in their firmware.
Prevent installation of specifically prohibited peripherals	You can't install or use prohibited peripherals that report specific properties in their firmware.
Allow installation and usage of specifically approved peripherals with matching device instance IDs	You can only install and use approved peripherals that match any of these device instance IDs.
Prevent installation and usage of specifically prohibited peripherals with matching device instance IDs	You can't install or use prohibited peripherals that match any of these device instance IDs.
Limit services that use Bluetooth	You can limit the services that can use Bluetooth.
Use Microsoft Defender for Endpoint baseline settings	You can set the recommended configuration for ATP by using the Defender for Endpoint security baseline.

Restrict USB drives and other peripherals

To prevent malware infections or data loss, an organization may restrict USB drives and other peripherals. The following table describes the ways Microsoft Defender for Endpoint can help prevent installation and usage of USB drives and other peripherals.

Control	Description
Allow installation and usage of USB drives and other peripherals	Allow users to install only the USB drives and other peripherals included on a list of authorized devices or device types
Prevent installation and usage of USB drives and other peripherals	Prevent users from installing USB drives and other peripherals included on a list of unauthorized devices and device types

All of the above controls can be set through the Intune Administrative Templates. The relevant policies are located here in the Intune Administrator Templates:

Note

Using Intune, you can apply device configuration policies to Azure AD user and/or device groups.The above policies can also be set through the Device Installation CSP settings and the Device Installation GPOs.

Note

Always test and refine these settings with a pilot group of users and devices first before applying them in production.For more information about controlling USB devices, see the Microsoft Defender for Endpoint blog.

Allow installation and usage of USB drives and other peripherals

One way to approach allowing installation and usage of USB drives and other peripherals is to start by allowing everything. Afterwards, you can start reducing the allowable USB drivers and other peripherals. Ergoitaliaspa Laptops & Desktops Driver Download for windows.

Note

Because an unauthorized USB peripheral can have firmware that spoofs its USB properties, we recommend only allowing specifically approved USB peripherals and limiting the users who can access them.

Enable Prevent installation of devices not described by other policy settings to all users.
Enable Allow installation of devices using drivers that match these device setup classes for all device setup classes.

To enforce the policy for already installed devices, apply the prevent policies that have this setting.

When configuring the allow device installation policy, you must allow all parent attributes as well. You can view the parents of a device by opening Device Manager and view by connection.

In this example, the following classes needed to be added: HID, Keyboard, and {36fc9e60-c465-11cf-8056-444553540000}. See Microsoft-provided USB drivers for more information.

If you want to restrict to certain devices, remove the device setup class of the peripheral that you want to limit. Then add the device ID that you want to add. Device ID is based on the vendor ID and product ID values for a device. For information on device ID formats, see Standard USB Identifiers.

To find the device IDs, see Look up device ID.

For example:

Remove class USBDevice from the Allow installation of devices using drivers that match these device setup

Stinger USB Devices Driver Download For Windows 10