IT admins can opt in to preview features as per the documentation here, and find out more about the specific feature here. USB storage device control for Defender on Endpoint for Mac is available in public preview today.

Custom queries can also be written by IT admins to identify USB events on a more granular scale. If a USB device does not reside in any of these nested entries, their access is defaulted to the top level permission for the organization. This is further enforced by having hierarchical custom policies containing vendors, products, and serial numbers. This is done by supporting 'Audit and Block' enforcement capabilities, controlling access for specific USB devices, and custom policies that can be set to redirect users to specific URLs when they plug in a restricted device. To reduce this attack surface, the company is now offering a public preview of USB storage device control for Mac, which essentially aids organizations in reducing this attack surface and mitigating data loss and malware. Microsoft has noted that many end users in organizations simply plug in USB devices on their enterprise machines without considering potential risks. The Secure Enclave also has a device group ID (GID), which is common to all devices that use a given SoC (for example, all devices using the Apple A14 SoC share the same GID).

On every new Mac, you should be able to find System Preferences in the Dock by default. For example, neither external storage devices connected over USB nor PCIe-based storage added to the 2019 Mac Pro are encrypted in this fashion. Before you change any preferences, you’ll have to launch the System Preferences app. While Windows calls its configuration options settings, macOS usually calls them preferences. Now, the firm has updated its macOS solution to offer better and more granular controls for USB devices. A Mac’s Control Panel Is System Preferences. The service is cross-platform and provides security capabilities across Windows, macOS, Linux servers, and Android. Microsoft Defender for Endpoint is the company's enterprise security solution to detect and mitigate vulnerabilities, reduce the potential attack surface, and simplify endpoint security management centrally.

Sep device control for mac