Event Types

All types of intercepted events are listed in Constructor. You can find them in the second column:

../_images/event_type_1.png

File Operation

Tracks file operations performed by applications like file managers, browsers, and other software.

../_images/event_type_2.png

Screenshot

Captures screenshots of the user’s screen. You can adjust the frequency and quality of these screenshots in the Configuration section.

../_images/event_type_3.png

User Activity

Monitors the user’s activity time in applications and websites. This data is commonly used in reports. To enable this feature, turn on the**User Activity** module.

../_images/event_type_4.png

Activity Time in VCS

Tracks the amount of time the user spends in video conferences. To enable this event, the Video Conferencing Control module must be activated.

../_images/event_type_5.png

Web

Monitors the websites visited by employees. To enable this event, activate the Web Traffic and Network Monitoring modules.

../_images/event_type_6.png

Keyboard

Records keystrokes and key combinations in various applications, including intercepted passwords during Windows login. To enable this feature, the Keyboard Input and Low-level Keylogger modules must be activated.

../_images/event_type_7.png

Software Inventory

Contains information about the software installed on the PC, collected when the configuration is updated and the agent is restarted.

To enable this feature, activate the Software Inventory module. The collected data is used in the Inventory-Software report.

../_images/event_type_8.png

Instant Message

Monitors instant messaging applications like Skype, ICQ, and others. To enable this feature, activate the Instant Messengers and Network Monitoring modules.

../_images/event_type_9.png

Mail

Tracks email correspondence.

Depending on the type of email you want to monitor, you need to enable the E-mail, Web Mail, and E-mail (MAPI/Exchange) modules. The Network Monitoring module must also be enabled.

../_images/event_type_10.png

Desktop Video

The Play button allows you to view all activities of the selected employee over a specified period of time.

To enable this feature, set up Screenshots and Desktop Video Recording in the agents configuration.

../_images/event_type_11.png

Form Data

Displays intercepted form data from internet browsers, including passwords entered in the browser. Captured passwords can be viewed under Triggered Policies → Passwords from Browsers.

../_images/event_type_12.png

FTP

Displays details about all connections made to FTP servers:

../_images/event_type_13.png

Devices Inventory

Provides a list of all computer devices with their IDs:

../_images/event_type_14.png

Network Connection

Tracks the IP addresses and ports used for connections. To enable this feature, activatethe Network Monitoring module.

../_images/event_type_15.png

Intercepted File

Grants access to shadow copies of files sent via email, instant messengers, downloaded through browsers, file storage, and more.

To enable this feature, the Shadow Copying and File System Activity modules must be enabled.

../_images/event_type_16.png

Sound Recording

Enables sound recording.

To use this feature, activate either Microphone Recording or Speaker Recording modules and configure your microphone recording settings. A microphone is required for recording.

../_images/event_type_17.png

Clipboard

Captures both text and images copied to the clipboard. To enable this feature, activate the Clipboard module.

../_images/event_type_18.png

System Log

This data is mainly used to troubleshoot issues with the agent or server. To access it, enable Debug Mode.

../_images/event_type_19.png

Search Query

Displays the queries entered by the user in popular search engines. To enable this feature, activate the Web Search Queries module.

../_images/event_type_20.png

User Logon/Logoff

Shows details about user logins and logouts from the system.

../_images/event_type_21.png

Device

Provides a list of devices connected to the PC.

../_images/event_type_22.png

Webcam Snapshots

Captures snapshots from the webcam. To enable this feature, configure the webcam snapshot parameters and enable the Webcam Snapshots module.

../_images/event_type_23.png

Webcam Video

Note

This feature was introduced in version 5.5 of Staffcop Enterprise. In earlier versions, videos are stored under the Webcam Snapshot event. If a new agent is used with an older server, video recording will not be performed.

Records video from the webcam in the workplace. To enable it, activate the Webcams module and switch on the Offline Webcam Recording option.

../_images/event_type_24.png

Printing

Tracks documents that are printed. To enable this feature, activate the Printing module.

../_images/event_type_25.png

Installation

Provides a list of applications that users have installed on their PCs.

../_images/event_type_26.png

Disk Drive

Shows connected external storage devices.

../_images/event_type_27.png

Wi-Fi Connection

Provides information about connections to wireless networks.

../_images/event_type_28.png

Alert

Displays event triggered by system policies.

../_images/event_type_29.png

Linux Terminal

Captures data entered in the terminal, displayed as both text and a GIF file.

../_images/event_type_30.png

Remote Logon/Logoff

Details about remote logon and logoff activities using Remote Desktop (mstsc).

../_images/event_type_31.png

Admin Log

Logs all actions performed by administrators.

../_images/event_type_32.png

File

Shows the results of the file scanner’s activity.

../_images/event_type_33.png

Application Run

Shows details about applications that have been launched.

../_images/event_type_34.png

Application Exit

Shows information about applications that have been closed.

../_images/event_type_35.png

Linux Log

Records events from intercepted bash and other shell commands, along with syslog entries.

../_images/event_type_36.png

PACS

Logs events from the PACS (Physical Access Control System).

../_images/event_type_37.png

Command Input Terminal

Monitors commands entered in the CMD, recording both the command and its execution result. To enable this feature, activate Keyboard and Clipboard → Command Input Control in your configuration.

../_images/event_type_38.png