KSC Open API
Kaspersky Security Center API description
Event mask used in the report on Device Control events

Possible event mask values used in the report on Device Control events (report type ID is 24).

ValueMnemonic nameDescription
0x1EDCEM_DEV_PLUGGEDInclude "GNRL_EV_DEVCTRL_DEV_PLUGGED".
0x2EDCEM_DEV_UNPLUGGEDInclude "GNRL_EV_DEVCTRL_DEV_UNPLUGGED".
0x4EDCEM_DEV_PLUG_DENIEDInclude "GNRL_EV_DEVCTRL_DEV_PLUG_DENIED".
0xFEDCEM_ALLInclude all of the above events.
See also: