You can use the Command Line logging tool in StoreGazer to look for any command prompts, (S)FTP sessions ,or file edits that accessed the E drive by searching for the phrase “E:”.
An alert can also be defined to ensure there are 0 files that match the E:*.* file specification. When a USB drive is plugged in, a file called “list” is placed on the E: drive. The alert will detect this file and alert you that a drive has been plugged in. You can then use any of the StoreGazer actions in response to this alert, including email, log, start program, etc.