IP KVM Devices

Detects unauthorized or suspicious USB device connections based on manufacturer, product, and device ID indicators. Primary focus is on known identifiers associated with IP-KVM devices. The search utilizes the CrowdStrike event feed, specifically focuses on the following event types: - DcUsbDeviceConnected - DcUsbDeviceDisconnected - DcUsbDeviceBlocked The device identifiers are sourced from publicly available sources (primarily GitHub).