Veriato Vision can track the following File Tracking events:
IMPORTANT: Currently, file tracking is available for Windows-based machines only.
- File Created: When a file is added/created on a monitored path or drive
- File Modified: When a file modification timestamp is updated. This can occur when the file is updated (new version of a document file is saved) or file properties are modified.
- File Deleted: When a file is deleted from a monitored path or drive.
- File Renamed: When a file is renamed. Veriato Vision will capture both the original File Name and the new File Name.
For each of the file events above, Veriato Vision will capture the following data from the monitored user:
- Computer Name
- Windows User Name
- Timestamp when event occurred
- Event Type (as explained below)
- Full folder/file name and directory of file.
Configuring paths to track for File Tracking
The agent does not monitor file events unless you explicitly enter paths in the Recording Policy.
- Add or Edit a Recording Policy.
- Switch ON File Tracking.
- Open the File Tracking panel.
- Specify paths or specific files to track (available for Windows and Mac devices).
- Save your changes.
- Assign the Recording Policy to a Group or Groups.
- To update your list of paths, edit the Recording Policy. Within minutes the agent receives and implements the settings change.
Here's how it works:
- The agent monitors all files within the specified path, and all files within any subfolder in the path, added to File Tracking.
- There is no limit to the number of paths you can add.
- The agent monitors actions on a file but not folder modifications.
- You can add both local and network drives. For network drives, specify the UNC path;for example, \\SERVERNAME\c$\USER
- Select “Ignore events from system files” to reduce the number of reported events for any files not relevant to a user's actions.