User guide

Reconnex Corporation
22
Release 7.0.0.4
Investigate a User's Online Activity
You may need to monitor online activity for an employee if you suspect company policies are being
violated. You can do this by finding a UserID, email address, hostname or IP address to identify the
user, then constructing a search to retrieve all information under that identifier.
Go to Capture > Advanced Search.
Open the Sender/Recipient category.
Identify the user by selecting an Email address, UserID or IP address.
If a UserID is used as an identifier, it must be an Active-Directory username, such as
those found on an LDAP server. Users can have more than one e-mail address alias, so a
UserID does not necessarily correspond to a user's email address.
4. Select the equals condition.
5. Type in the identifier.