Spector CNE
|
|
Administrator's Guide |
Configure the flexible Keyword Alerts options from:
Client Deployment Utility - Pre-configure the recording options in the Client installation file.
Control Center >Configure Computer View > Client Settings - Select individual Email Activity options to enable or disable.
Spector Client can detect keywords that occur in the events being recorded. A “keyword event” occurs when a pre-defined word or phrase is detected during the Client's recording of events.
When a keyword event occurs, the Client can be configured to send an immediate notification containing information about the event. In addition, the Client can increase the Snapshot recording interval to record as much information as possible about the activity of the computer and the context in which the keyword alert was generated.
For every keyword configured, Client will scan the following events on the computer, looking for a match:
Web site URLs visited within a browser
Example: If “beer” is a keyword, then a visit to “www.beer.com” would match and an alert would be generated.
Content of Web sites accessed
Example: If “job hunt” is a keyword and the sentence, “We can help you with your job hunt,” is found on a Web page the user visited, then the keyword would match and an alert would be generated.
Keystrokes typed As keystroke events are recorded, keystrokes are scanned for keyword matches. Keyword matches will not occur when formatting keys such as backspace and delete are used.
Example: If a keyword is “beer” and the user types “b”, “e”, “backspace”, “e”, and “r” then the keyword would NOT match even though the keystrokes would likely be displayed to the user as “beer”.
Email sent and received Client will scan the body of each email sent and received looking for matches to the keyword list. The To, From, and Subject fields will not be scanned.
Chat and Instant Messages Client will scan the content of each recorded Chat and Instant Message conversation.
When a keyword match is found in one of the above events, a keyword event will be generated containing the following information:
Keyword detected
Date and time the keyword was detected
Windows user logged on at time keyword was detected
Type of event in which the keyword was detected
When a keyword event is generated, an alert notification message may be sent at the same time. Each alert will contain the keyword event information above, as well as further specific information related to the event in which the keyword was detected:
For keywords found on a Web page, the Web page URL will be provided
For keywords found within keystrokes, the previous keystrokes for that application will be provided
For keywords found within Chat and Instant Message conversations, part of the conversation will be provided
For keywords found within an email, the email will be forwarded
Keyword events will not be recorded when any of the following apply. The Client does not:
Detect keywords in a Snapshot event
Detect keywords in a Program event
Detect keywords in headers of email. The header is the To, From, and/or Subject fields
Detect keywords in email attachments
Detect keywords and keystrokes if Client's control characters are used. (i.e., would not detect keyword of “sex” if user typed “s”, ”e”, ”t”, backspace, and/or ”x”)
Detect keywords in Web sites that are transmitted encrypted. This means Web sites that are addressed through the secure SSL protocol and are typically addressed with https:\\
Detect keywords in Web sites that are transmitted compressed. (i.e., Web sites that are compressed [i.e. Yahoo]) cannot be scanned
Web Sites Recording and Review
Keystrokes Recording and Review
Snapshots Recording and Review