Falcongaze SecureTower. User Guide Table of Contents 1 What's............................................................................................................................7 New 2 Program............................................................................................................................8 overview 3 Tips for............................................................................................................................9 Guide 4 Getting............................................................................................................................10 started. Connecting to the server 5 Console............................................................................................................................13 options 5.1 Tips &.........................................................................................................................20 Tricks in the console 6 Information............................................................................................................................24 search 6.1 Full-text.........................................................................................................................26 search 6.2 Search.........................................................................................................................29 by data type 6.3 General.........................................................................................................................30 search parameters 6.4 Additional.........................................................................................................................31 search parameters 6.4.1 Mail search........................................................................................................ parameters 31 6.4.2 Messengers........................................................................................................ search parameters 33 6.4.3 Web search........................................................................................................ parameters 34 6.4.4 File search parameters........................................................................................................ 35 6.5 Number.........................................................................................................................37 of search results 7 Complex............................................................................................................................38 search 7.1 Selecting.........................................................................................................................39 a search type 7.2 Creating.........................................................................................................................41 a search request 7.3 Searching.........................................................................................................................61 by thesaurus 7.3.1 Thesaurus manager........................................................................................................ 63 7.4 Searching.........................................................................................................................66 by digital fingerprints 7.4.1 Digital Fingerprints........................................................................................................ manager 67 7.4.2 Digital fingerprints........................................................................................................ of files and folders 69 2 [email protected] 7.4.3 Digital fingerprints........................................................................................................ of databases 72 7.4.4 Digital fingerprints........................................................................................................ of CSV 75 7.5 Search.........................................................................................................................78 interval and results limit 7.6 Active.........................................................................................................................79 Directory groups 7.7 Operating.........................................................................................................................80 with search request 7.8 Favorites.........................................................................................................................81 8 Viewing............................................................................................................................82 search results 8.1 Search.........................................................................................................................84 results list 8.1.1 Main menu ........................................................................................................of Search results list 84 8.1.2 Additional symbols........................................................................................................ in search results 87 8.1.3 Context menu........................................................................................................ of Search results list 89 8.2 Identifying.........................................................................................................................90 senders and recipients in search results 8.3 Viewing.........................................................................................................................92 intercepted data 8.3.1 Viewing Web........................................................................................................ traffic data (HTTP) 95 8.3.2 Viewing e-mails........................................................................................................ (POP3, IMAP, SMTP, MAPI) 97 8.3.3 Viewing complex........................................................................................................ data formats (attachments, archives, files) 101 8.3.4 Viewing conversations........................................................................................................ in IMs 103 8.3.5 Viewing files........................................................................................................ transferred in IMs 106 8.3.6 Viewing printed........................................................................................................ files 107 8.3.7 Viewing files........................................................................................................ transferred over FTP protocol 109 8.3.8 Viewing files........................................................................................................ copied to a storage device 110 8.3.9 Viewing user........................................................................................................ screenshots 111 8.3.10 Viewing endpoint........................................................................................................ activity statistics 118 8.3.11 Viewing clipboard........................................................................................................ content 123 8.3.12 Viewing files........................................................................................................ transferred to network shares 123 8.3.13 Viewing cloud........................................................................................................ storages files 124 8.3.14 Viewing keylogger........................................................................................................ 124 8.3.15 Viewing device........................................................................................................ audit data 125 8.3.16 Viewing recognized........................................................................................................ data 126 8.3.17 Viewing browser........................................................................................................ activity 129 8.3.18 Viewing results........................................................................................................ of workstation indexing 130 8.3.19 Viewing results........................................................................................................ of search by thesaurus 130 8.3.20 Viewing results........................................................................................................ of search by DF 130 9 Monitoring............................................................................................................................131 user network activity 9.1 User.........................................................................................................................132 list 9.2 User.........................................................................................................................134 cards www.falcongaze.com 3 Falcongaze SecureTower. User Guide 9.3 Viewing.........................................................................................................................139 user network activity report 9.3.1 Viewing daily........................................................................................................ network activity of a certain user 139 9.3.2 Viewing different........................................................................................................ types of intercepted data 141 9.3.3 Viewing user’s.......................................................................................................