|
In this topic: |
For
Document Tracking, the Spector 360 client records which files and documents
are printed, moved or copied. Use the Dashboard to track when and by whom
confidential files or secure information is printed, moved or copied to
external devices. See Understanding Recorded Events: Document
Tracking to learn exactly what Spector 360 records.
For security purposes, track documents located at a particular location on your network by selecting a path or by selecting a Device Name (computer name on the network) or document name.
To search for keywords:
Type the keywords you want to match (for example, "budget") and then select one of the following. For more about keyword matching, click here.
Include partial matches: Check to look for a partial match; for example, the search word "man" would match "mankind" and "manage" in any of the following data fields.
Document Path: Match the keyword anywhere in the document path. For example, the "budget" search with a Partial Match returns events involving documents in the path C:\Misc\2006\Budgets\... or C:\Misc\2005\Budgets\...
Document Name: Match the keyword in the document name; for example, all events involving the files "budget2006.xls" and "budget2006.doc" would be returned.
Device Name: Match the keyword in the device name where the event occurred; for example, documents saved to a CD with the volume name "Budget 2005" or to a USB memory stick named "BUDGETS" would be returned.
Retrieve all program events, or focus on specific programs.
To limit by program:
Use the Program(s) drop-down list to specify a program or group of programs you wish to include or exclude. For example, to see who has been printing long word documents, select "Include Specific Program(s)" and select all MSO Winword programs. See Viewing by Program.
Specify which document's actions you want to view. You can track documents created and edited. If concerned about security of company's intellectual property, you may want to track documents that are printed or renamed.
|
|
Be aware that the default Document Tracking recording captures ALL action, but ONLY on CD-ROM and Removable drive types. Use the Control Center to change Document Tracking record settings. |
To limit by Document Tracking action:
Select the type of action to review:
All: No filtering - returns all actions.
Create: Returns events where new files were created.
Delete: Returns events where files were deleted from a drive.
Edit: Returns events where changes made to an existing file.
Print: Returns files that were printed.
Rename: Returns files that were given a new filename.
Filter events based on the device involved in the document action (CD-ROM, printer, memory stick, pin drive, local disk etc.). Include or exclude documents based on specific media types. You can track movement of documents on the network and keep tabs on who is moving or copying sensitive information to removable storage.
To limit events by Document Tracking device:
Select a device:
All: No filtering - returns actions on all devices.
CDROM: Returns document actions involving a CD-ROM device.
Network: Returns document actions on network drives.
Local: Returns document actions on the local computer (where the recording took place).
Printer: Returns document actions happening on printers.
Removable: Returns document action taken involving a removable device, such as USB memory stick.
Other: Returns document actions that Spector 360 does not categorize with the above devices.
|
|
Note that Client recording must be set up to capture activity on these devices or no data will be returned. |
