
Spector 360 records file downloads and uploads. File Transfer includes Peer-to-Peer, FTP and HTTP methods of communication that allow direct exchange of information between two computers. The Dashboard helps you find out where transfer traffic is occurring and who's doing it most often. Using the forensic data provided by this report, you can inspect the characteristics of file transfers, which can reveal the source of viruses or the distribution of copyrighted material. You can also increase security by tracking the movement of confidential files and materials delivered to clients.
To view Files Transferred:
Open an Events window for File Transfer activity and click Load Events to view File Transfer details for a user, date or activity. The following fields are recorded for each event. You can print and export this data for any user.
Recorded Time: Time at which the event recording began.
Computer: Name of the computer where the recording occurred
User: Person who performed action
Program: Program used to perform action
Action: Type of action taken (upload, download)
Protocol used - HTTP, FTP, KAZAA, GNUTELLA, MSN - click each for a quick explanation
IP Address of file destination or source
Host of destination or source click for explanation
Domain of destination or source click for explanation
File Name of transferred file
To navigate in the events:
In the events grid click any field to select a record and then scroll up or down through the records. You can also use the "Play" buttons at the bottom of the grid to move through records.
To sort the records by any field:
Click any field column header (e.g., Protocol) to list the records A-Z by that field. Hold down the Shift key and click on column headings to sort by multiple fields (e.g., Protocol and Domain).
To select how many records are shown:
Use the tree in the upper-left Navigate pane to select a higher (more records) or lower (fewer records) branch in the Event Group. Click Load Events to see the records for the branch in the Events pane. This allows you to adjust the data for report and export purposes.
To view a Screen Snapshot of the event:
Select the recording in the Events pane and click View Screen Snapshots. Or, right-click in the Events grid on a record and select Event Snapshot.
To block a web site:
Right-click on the event record with the domain you wish to block. Select Add to Web Filtering Category. The Select Web Filtering Category box opens. Add the domain to a Custom Category (list of domains) that you are currently blocking in your Website Filtering Rules. Follow the instructions in Adding Domains as You View Recordings.