Reference Guide

Dell Security Center v10.2.7 AdminHelp
63
Open
(Windows only)
Used with Email Action.
●
Sent
(Windows only)
Used with Email Action.
●
Reply
(Windows only)
Used with Email Action.
●
Forward
(Windows only)
Used with Email Action.
.
●
Column options for System (protected Office documents and Windows)
The following actions relate to the computer, so they have no corresponding Data Guardian action.
Note: The grey options apply to Windows and Data Guardian v2.7 and earlier.
Audit Event - Column options Description
Login
If a user logged in and did a fast user switch, for example, logged in and then rebooted.
Logout
User logged out of a session.
Blocked PrintScreen
(Windows only and Data Guardian v2.7 and
earlier)
Indicates a file where a user tried to capture a screen while a protected Office document was open
and is blocked.
Blocked Process
(Windows only and Data Guardian v2.7 and
earlier)
When policy blocks a specified process executable, indicates a file where a user tried to run that
process executable.
Process Name
(Windows only and Data Guardian v2.7 and
earlier)
The name of the process that was blocked, for example, Snipping Tool.
Process Disposition
(
Windows only and Data Guardian v2.7 and
earlier)
Indicates whether the process has exited or has been terminated.
Column options for Beacon only (protected Office documents)
Audit Event - Column options Description
Column options related to geolocation:
IP Address
Routable
Geo Type
Latitude
Longitude
IP Address - When a Beacon event comes in and the Beacon server can determine the location of the
event, it lists the IP address.
Routable - True or False
• If True, geolocation data exists for that IP address and identifies the device's latitude and
longitude based on each operating system's APIs.
Note: If the Routable column lists True, but no geolocation data displays, an error occurred.
• If False, the IP address is non-routable.
Latitude and longitude - The data visualization is based on these coordinates rather than a street
address. Usually, the map visualization displays the location of the device. If a user accesses the
computer remotely and neither GPS or WiFi is available, the map visualization may display the
location based on the remote computer's VPN IP address. The column lists the coordinates as plus (+)
or minus (-), correlating to North, South, East, or West.
Geo Type - Typically, this is Point.
Geolocation for audit events is supported on Windows 8.1 and higher
Column options for Cloud Encryption only (mobile and web portal; Windows Data Guardian v2.3
and earlier; Mac)
Greyed out options indicate earlier versions of Windows and Mac Data Guardian. See also
Column_options_for_all_audit_events
.