Check for large file transfers onto USB Drives

New Contributor

We run an OS X based creative agency and what I want to accomplish is see when a user is gobbling up files before they quit. Ideally we'd trust all our files with the people appointed to run the projects, but in our industry people move around a lot between companies and sometimes take entire client folders with them.

Most likely what we'd want to audit or get an alert towards would be a USB drive, and then a copying of 1000+ files to that drive, and/or being able to have a regex that checks if the files came from a particular path matching /Projects/Clients

Can Casper do that level of auditing per computer/user? If not, what would be the best approach?