Spector CNE
|
|
Administrator's Guide |
From the Viewer's File Management you can view and manage Spector Client data files. File Management shows the data files for the currently loaded user or computer.
To open File Management:
Open the Viewer from the Control Center or as a standalone application.
If necessary, load the user or computer you wish to view.
Open the Viewer's Window menu and select File Management. A list of data files in the current folder appears.
The list displays Filename, Date, Size, and Type.
The path and name of the data file.
Files containing Snapshots are named snapshot...sdf
Other data files are named spmmddyyyy.sdf
specifying the date the file was created. The extension will default to
.sdf for all data files recorded
by the Data Vault.
Note: The folder and file name displayed for each data file will have a Windows folder and file extension matching the configuration set within the Client Settings >Security tab > Data Files options. See Client Local Data Files Settings.
If you ran the Viewer from the from the Control Center, the path before the filename indicates the file's location in the Data Vault (the fully qualified Windows UNC path configured to store events received by the Data Vault.
If you ran a standalone Viewer, or if File>Open was used to load data files, then the folder displayed will reflect location of folders loaded.
|
|
It is not recommended that you change the location of the data files. Doing so may compromise the security and stealth of the data. |
Date - date and time
The date and time for each file specifies when file was created EXCEPT for Snapshots. The date and time specified for Snapshot type files is the recorded time span for information contained within these particular files. As a result, each Snapshot type data file will contain many snapshots, all of which were recorded in that time span. For example, there may be 15 snapshots within a file, all of which were recorded on Thursday, October 24 at 7:13 AM.
Size - file size in kilobytes
The size of a file equals the total amount of recorded data contained within that file.
Activity This single file contains all the data regarding recorded keyword alerts. The data within this file corresponds to information viewed in the Keyword menu of the Snapshot window. Deleting this file eliminates all recorded keyword alerts displayed there
Chat/IM This single file contains all the data regarding recorded Chat and Instant Messages. This includes AOL, Yahoo, MSN chat, ICQ chat, and AOL Instant Messaging. The data within this file corresponds to information viewed in the Chat/IM window. This data file will not grow larger than the maximum file size configured in the Settings>Chat tab. Deleting this file eliminates all recorded information displayed in the Chat/IM window
Keystrokes This single file contains all the data regarding recorded keystrokes. The data within this file corresponds to information viewed in the Keystrokes window. This data file will not grow larger than the maximum file size configured in the Settings>Keystrokes tab. Deleting this file eliminates all recorded information displayed in the Keystrokes window
Email This single file contains all the data regarding recorded emails. This includes SMTP/POP3 email and AOL email. In addition, it contains all recorded email attachments, if you have configured the Client to record attachments. The data within this file corresponds to information viewed in the Email window. This data file will not grow larger than the maximum file size configured in the Settings>Email tab. Deleting it eliminates all information displayed in the Client Email window
Queue This single file contains all the data recorded that is waiting to be transmitted as Keyword Alerts. The data files of Queue will not be seen in File Management unless the Client is unable to transmit the email alerts. Deleting this file eliminates all email alerts waiting to be transmitted to an email address
Web This single file contains all the data recorded that tracks visited Internet Web sites. This data corresponds to information displayed in the Internet menu of the Snapshot window and the Web section of the program. Deleting this file eliminates all URLs to visited Web sites, displayed both in the Internet menu of the Snapshot window and the Web portion of the program
Screen Snapshots There will be many files of Snapshot data that contain the recorded information for Snapshots. Each file will contain snapshots recorded during the displayed time span. Deleting this file eliminates all recorded snapshots displayed for that time span in the Snapshot window. The total size of all Snapshot data files will not exceed the maximum file size configured in the Settings>Snapshot tab
Users This data file simply keeps track of the different users that log on to the system, allowing the Client to identify which user did what. This will only work if the user has to log on to the computer using their log on name and password (if any).
ALL This data file is the format used for all events stored by the Data Vault except Snapshots. This data file will contain a mix of all the above events except from Snapshots.
You can use File Management to save data in a new location and delete it. You can right-click and choose Select All to save or delete a set of data files.
To save data in a new location:
Right-click a file and select Save As.
Browse to a location and Save the file.
To delete data:
Right-click a file and select Delete.
Chat & Instant Message Recording
