SentinelOne blocks USB devices
You can control the use of USB devices using SentinelOne's Device Control feature.
In SentinelOne, navigate to Sentinels, and then the Device Control tab:
From here you can create a New rule on whether to Allow or Block particular USB devices. You can also change the scope of the rule to apply on an Account or Site level. This way if you wanted to create another Site and move the desired endpoints into it, the rule would apply to a certain subset of endpoints.
You can also enable Device Control reporting to the Activity Log. You can do this by selecting the cogwheel on the Device Control page. This allows you to see when rules you create are actioned on in the Activity Log.