|
|
|
|
|
|
Spector Pro records every key typed on the monitored PC keyboard which, in combination with the Snapshot feature, allows you to see the full context in which they were typed. Spector Pro records:
Standard alphanumeric keystrokes - A through Z, a through z, and 1 through 0.
Non-displayable or hidden keystrokes - Shift, Ctrl, Alt, Enter, Backspace, spacebar, etc.
"True" keystrokes - These keystrokes appear differently on the screen than what is actually typed. For example, an asterisk (*) appears on the screen when a password is typed.
Characters - Some languages require more than one keystroke to create a character. For example, the user may type four keystrokes in order to create two characters. Spector Pro displays both keystrokes and characters.
Click here to view a screenshot.
You will be able to tell if someone has discovered your password and has been using it to get into important, private documents.
If an email or chat program is being used and Spector Pro doesn't record that particular application, you can still find out what the user in your house has been typing by viewing the Keystrokes event window.
If, for example, the user copied and pasted something into a new document, you will see the document name and application, the exact time, and hidden keystrokes Ctrl+C (copy).
Then you will see the document name and application, the exact time, Ctrl+V (paste), then [Save As], the exact time, and the name of the new document in which the information was saved.
|
|
By default, Spector Pro captures keystroke activity. To learn more about the settings that affect what you view in this window, see Keystroke Settings. |
The Keystrokes Typed window uses an Event pane and a Content pane to display information. You may change the order in which columns are arranged or how information is sorted within a column.
Event Pane (upper)
Keystrokes are either categorized by program (Program Execution) or by window (Program Window Title). For example, the user opens Microsoft Word one time (one program execution), and within that program session opens three new documents (three program window titles). If you group by program execution, there is one recorded event. If you group by window title, there are three recorded events.
Double click on an event to open a Keystrokes Typed Content window which displays the actual keystrokes. (Keystrokes display according to the filters selected in the lower Content pane).
From this window you can save, cut, copy, paste, and print data, switch among Keystroke Formatted and Raw, and Custom views, as well as access the Next or Previous event. To save an event on your computer:
Click Save As. On the Save As window that opens enter a path, file name and format (you can use rtf or txt).
Click Save. If you save the event as an rtf file, a Word document is created as shown below.
Content Pane (lower)
The Content pane displays the actual keystrokes and characters for the event highlighted in the upper Event pane. Keystrokes display differently, depending on which filtering option is chosen: Keystrokes Formatted, Keystrokes Raw, or Custom. See What is Recorded in the Content Pane, below, for further detail.
(Program Execution)
The following columns are displayed in the upper Event pane:
Start - The date and time when the program was executed, using the format MM/DD/YYYY HH:MM:SS AM/PM.
Program - The name of the application (program) that was executed.
Keystrokes - The total number of keystrokes typed in the program.
The following columns are displayed in the upper Event pane:
Start - The date and time when the window was opened.
Title - The title of the active window in use when the keystrokes were recorded.
Keystrokes - The total number of keystrokes typed in the window.
Program - The name of the application (program) that was executed.
Right-click in the pane and select any of these additional columns for display:
User - The user logged in to Windows.
Computer - The name of the computer on which activity was recorded.
End - The date and time when the program or window was closed, using the format MM/DD/YYYY HH:MM:SS AM/PM.
Characters - Some languages commonly require more than one keystroke to create a character. For example, the user may type 4 keystrokes and create 2 characters. This column shows the total number of characters typed. If this is selected, the Character tab appears in the Content pane below.
Filters add flexibility to how keystroke and character information is displayed in the Content pane. Both Keystroke and Character views are available by selecting the appropriate tab, and may be customized to include or exclude various types of keystrokes and characters.
Select the Keystrokes tab to view all keystrokes typed. Keystrokes display in black.
Formatted - In this view, keystrokes appear just as they look in the original document, retaining all formatting. By default, Show Start Time is turned on.
NOTE: If the Num Lock was ON when keystrokes were typed, numerals display. If the Num Lock was OFF when keystrokes were typed, navigation keys display, for example: <End> <Down> <Page Down> <Left> <Num 5> <Right> <Home> <Up> <Page Up <Insert>
Raw - In this view, keystrokes appear as a continuous string that includes displayable keystrokes (letters, numbers and punctuation), non-displayable keystrokes (words appear for such keys as <Shift> <Backspace> <Ctrl> <Space> <Enter> <Tab>), and words that were deleted due to backspacing. In addition, you can view keystrokes which may otherwise appear differently (such as an * when a password is typed). Keystrokes appear in ALL CAPS.
Custom - Click the small triangle next to Custom and the Custom Keystroke View window opens. Select which items you want to display in either the Formatted or Raw view. Choices include:
Show Displayable: When this box is checked, the Content pane displays numbers, letters, and punctuation.
Show Non-Displayable: When this box is checked, the Content pane displays items such as <Shift>, <Backspace>, and <Ctrl> wherever they were pressed.
Show Words for Space / Enter / Tab: When this box is checked, the Content pane displays <Space>, <Enter> and <Tab> wherever they were pressed.
Process Backspace: When this box is checked, Spector Pro eliminates the keystrokes that were deleted because of backspacing, as well as the <Backspace> designation
Format Keystrokes: When this box is checked, the Content pane displays keystrokes in upper and lower cases, as typed in the original document.
Font Size: Enter the font size in which you want the view displayed.
|
|
If you select only Show Displayable, Process Backspace and Format Keystrokes, the Custom view is identical to the Formatted view. |
Select the Characters tab to view all characters typed. Characters display in red.
Formatted - In this view, characters appear just as they look in the original document, retaining all formatting. By default, Show Start Time is turned on.
Raw - In this view, characters appear as a continuous string that includes displayable keystrokes (letters, numbers and punctuation), non-displayable keystrokes (for example, Shift, Backspace, Ctrl), words for Space / Enter /Tab, and words that were deleted by backspacing.
Custom - Click the arrow next to Custom and the Custom Keystroke View window opens. Select which items you want to display in either the Formatted or Raw view. See Custom above.
NOTE: This tab is only visible IF Capture Character Information has been selected in Keystroke Settings, and if Character is selected as a column in the upper Event pane.
The Keystrokes Typed event window contains the following shortcuts:
Group by - Use this to customize the display of recorded data in the upper event pane. You may select how data is grouped, and the order in which the groups appear in the tree. You can also determine the direction in which information is sorted (ascending or descending).
Jump to - Click to select a specific recorded event in the upper Event pane and then jump to Snapshots.
Search Keystrokes Typed- Use Search to quickly locate a specific word or phrase. Search works like a filter displaying only the data that matches the search criteria. You can search in both the keystroke and character mode.
Delete - Use Delete to remove one or more events.
The menu bar is specifically customized for Keystrokes Typed.
The status bar contains the standard items.
Next you will review Program Activity.
