|
|
|
|
|
|
Spector Pro shows you when a user logs on to the computer, when the user is active and when the user stops being active. This window also presents an easy-to-read graphic that allows you to see, at a glance, patterns of behavior over a designated period of time.
Click here to view a screenshot.
The activity and inactivity recorded about each user acts as an "electronic time card" because it identifies exactly when the computer was in use each day and for how long for each user.
Spector Pro also identifies when and if a clock change took place, showing if an attempt has been made to manipulate the system time. If recording is interrupted for any reason, this information is also displayed.
|
|
By default, Spector Pro captures user activity for all user names. To limit which user names to monitor, see Who to Record: Selecting Users. |
Information displays in the lower Summary and Detail panes for the event(s) highlighted in the upper Navigate pane. You may change the order in which columns are arranged or how information is sorted within a column.
Navigate Pane (upper)
Each time a user logs on, it is considered one recorded event. Events are arranged in groups and sub groups and sub-sub groups, each of which is displayed like a branch on a tree. By default events are grouped first by date, although you may choose to group the events differently.
Click on the plus (+) sign, which then becomes a minus (-) sign, next to the Users icon to expand the tree and view each month for which activity was recorded.
Click on the plus (+) sign next to a month to expand the tree and view each week for which activity was recorded.
Click on the plus (+) sign next to a week to expand the tree and view each date for which activity was recorded.
Summary Pane (lower)
Click the Summary tab to view this pane. The Summary pane contains a graphic display of data based on the amount of time highlighted in the Navigate pane. By navigating up or down in the tree above, you display a wider or narrower view of the events.
Light blue indicates activity; dark blue indicates inactivity; a red icon indicates a clock change; a black icon indicates recording interrupted.
For example:
Select the icon at the top of the tree to display the graphic for all user activity that has been recorded.
Select a specific month, for example Jul 2006, to display the graphic for that month.
Select a specific week, for example Week of Jul 17, 2006, to display the graphic for that week.
Select a specific day, for example Fri, Jul 21, 2006, to display the graphic for that day.
Detail Pane (lower)
Click the Details tab to view this pane. The Detail pane displays specific information about activity during the specified date range. By navigating up or down in the tree above, you display a wider or narrower date range.
For example:
Select the icon at the top of the tree to display details for all user activity that has been recorded.
Select a particular month, for example Jul 2006, to display details for that month.
Select a particular week, for example Week of Jul 17, 2006, to display details for that week.
Select a particular day, for example Fri, Jul 21, 2006, to displays details for that day.
The Summary pane displays the following columns:
Date - Date activity was recorded.
Day - Day of the week activity was recorded.
Graph - A graphical representation of the user's activity for the time period.
The graph portion of the Summary displays these elements:
Options - Opens a box where you can select User Activity graph options. See below.
Activity - The light blue marks time periods when the user was typing, scrolling, or using the mouse.
Inactivity- The dark blue marks time periods when the user was not active.
Clock Change - A red icon represents each point in time when the user attempted to change the clock.
Recording Interrupted - A black icon represents each point in time when recording has been interrupted for any reason. Recording could be shut down because of anti-spyware, a program conflict, user tampering, at the user's request, or due to failure of the recorder to initialize correctly.
12 AM - 12 PM - Activity is presented in a 12-hour interval, starting with 12 AM.
Right-click in the column heading area and select any of the following additional Summary columns for display:
User - The user logged in to Windows.
Computer - The name of the computer on which activity was recorded.
Type - Type of activity marker: End Activity, End Inactivity, Logon, Start Activity, Start Inactivity.
Logon - Time the user logged on to the computer.
Active - Total time of activity per day.
Inactive - total time of inactivity per day.
The Graph Options for User Activity are:
Logon - Turn the display of Logon data on and off. Bright green shows the total time during which a user is logged on, whether they are active or inactive.
Activity - Turn the display of Activity data on and off.
Inactivity - Turn the display of Inactivity data on and off.
Clock Change - Turn the Clock Change graphic on and off.
Recording Interrupted - Turn the Recording Interrupted icon on and off.
Days with No Activity - When checked, days when there is NO user activity are displayed so that there is a line for every day of the week.
Start Hour / End Hour - Use the dropdown list to select a different Start or End Hour to limit the number of hours displayed. Shortening the number of hours increases the size of the columns. By default, hours are presented from 12:00 AM through 12:00 PM.
The Details pane displays the following columns.
Time – The date and time when the activity was recorded, using the format MM/DD/YYYY HH:MM:SS AM/PM.
Type – The type of activity, for example Logon, Logoff, End Activity, Start Activity.
Start - The time when activity began, using the format MM/DD/YYYY HH:MM:SS AM/PM.
End - The time when activity ended, using the format MM/DD/YYYY HH:MM:SS AM/PM..
Total - The difference between the start time and the end time, in seconds.
Right-click in the column heading area and select any of the following additional columns for display:
User - Identifies which user was logged in to the computer, by his / her unique user name.
Session ID - An internal ID.
Session Start - Date and time that the computer was first logged into, using the format MM/DD/YYYY HH:MM:SS AM/PM.
Session Timeout - Indicates whether an unexpected log off occurred (Yes / No) and at what time. This is also indicated in the Summary graph as Recording Interrupted.
The User Activity event window contains the following shortcuts:
Group by - Use this to customize the display of recorded data in the Navigate pane tree. You may select how data is grouped, and the order in which the groups appear in the tree. You can also determine the direction in which information is sorted (ascending or descending).
Jump to - Click to select a specific recorded event in the lower Detail pane and then jump to Snapshots or Keystrokes.
Delete - Use Delete to remove one or more events.
The menu bar is specifically customized for document tracking.
The status bar contains the standard items.
Next you will review Document Tracking.
