Sessions with occurrences detected

Prev Next

This document provides information about the Sessions with occurrences detected report screen, which displays information that combines all records of sessions where any audited command was detected.

Path to access

  1. On Segura, in the navigation bar, hover over the Products menu and select User Behavior.
  2. In the side menu, select Audited command logs > Sessions with occurrences detected.

Actions menu

Item Type Description
Actions Dropdown menu Displays the options Print report, Export CSV, and Schedule report.

Search fields

Item Type Description
Session ID Text field Filters commands by their unique identification code.
Local user Text field Filters commands by the Segura username.
Remote device Text field Filters commands by the command’s target-device.
Session start Date picker Filters commands by the session date. Use this field to enter the start date of the period.

Report fields

  • Session ID.
  • Local user.
  • Remote device.
  • Credential: credential used in the session.
  • Start: date and time the session started.
  • End: date and time the session ended.
  • Time: session duration.
  • Events: number of occurrences in the session.
  • Score: session score.
  • Actions:
Info

By default, the report displays 30 records per screen. To go to the next screen, click the forward buttons at the end of the report.