usbdeath
A bash-based anti-forensic script that monitors USB ports and triggers system shutdown when unauthorized devices are detected.
Endpoint SecurityEndpoint Detection and ResponseOn-PremisesStartup · SMB · Mid-Market · EnterpriseFree130
A bash-based anti-forensic script that monitors USB ports and triggers system shutdown when unauthorized devices are detected.
Checked October 2026.
usbdeath is a bash-based anti-forensic script that monitors USB port changes and executes shutdown commands when unauthorized USB devices are detected.
The tool operates as a rule file manipulation script that integrates with the existing udev daemon for monitoring, rather than running as a separate daemon process. It provides enhanced device identification by utilizing multiple USB device attributes including device name and serial number, offering more granular control compared to similar tools.
Key features include:
The script includes a safe demo mode for testing purposes and allows users to customize trigger commands according to their security requirements. It generates udev rules files to handle USB device events and provides commands for managing these rules through a simple command-line interface.
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about usbdeath: features, pricing and alternatives.
usbdeath is a product in the Endpoint Detection and Response category. It covers Linux, Anti Forensics and USB Security.
usbdeath is free. Download and setup instructions are at https://github.com/trpt/usbdeath/.
Alternatives to usbdeath listed on CybersecTools:
Compare all usbdeath alternatives at https://cybersectools.com/alternatives/usbdeath
usbdeath is available as on-premises software. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Policy-based EDR solution monitoring endpoints for IoCs with automated responses
EDR and NGAV solution for endpoint threat detection, prevention, and response
Managed SaaS for osquery fleet management across endpoints
EDR+EPP solution for endpoint protection, threat detection, and response
AI-powered endpoint protection with integrated EPP and EDR capabilities
EDR solution for endpoint threat detection and response capabilities
On our shortlist?
usbdeath is not a pick on the current Best EDR Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,030 products.
Connect your AI
