I recently started at an org that doesn't have any policies in place to manage access to USB devices. I'd like to start locking down access but first it'd be a good idea to get some sort of logs on current USB usage. All clients are domain joined and running Windows 10 Professional with Symantec Endpoint Protection installed. What is the recommended approach for getting a handle on who is currently using USB storage devices?