---
title: Event Sources
slug: admin/event-sources
description: Looking for event sources for process monitoring and blacklisted applications? This document provides a comprehensive list for your selected role's rule set, including clipboard monitoring, display detection, event analytics, and more. Learn about the eve
icon: 🔄
createdAt: 2022-08-18T22:09:34.000Z
---

The first thing you see is the list of Event Sources (or event generators) for the selected role's rule set.  This list is primarily used for the definition of blacklisted applications associated with process monitoring.  Unless otherwise guided to do so, you can leave this list alone.  See [Event Sources](docId\:M7Mjn8SyLCnYpukJurcKB) for more details if needed.

![](https://api.archbee.com/api/optimize/dalDLQU__OxpwynUmcLKa/0zLbNiPRxaxXWDmyVNPbP_rsr-event-source-list.png)

| **Source**       | **Description / Generated Events**                                                                                                                                                                                                                                       |
| ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| CLIPBOARDMONITOR | Monitors for agent pressing Ctrl-C (Copy) or PrintScreen.<br />Generated Event(s):<br />- BlacklistedKeyStrokeDetected                                                                                                                                                   |
| DISPLAYDETECT    | Monitors for external displays being attached to the agent's system.<br />Generated Event(s):<br />- ExternalMonitorDetected                                                                                                                                             |
| EVENTANALYTICS   | This source supports Desktop Process Analytics.                                                                                                                                                                                                                          |
| MONITORPROCESSES | Monitors for processes configured for blacklisting by agent state:<br />- "na" state = prior to the agent being logged in / authenticated<br />- "all" state = once the agent is logged in / authenticated).<br />Generated Event(s):<br />- UnauthorizedProcessDetected |
| NETWORKDETECT    | Monitors for network connection / disconnection on the agent's machine.<br />Generated Event(s):<br />- NetworkConnectionDetected<br />- NetworkDisconnectionDetected                                                                                                    |
| PRINTERJOBS      | Monitors for printing jobs to be queued on the agent's machine.<br />Generated Event(s):<br />- UnauthorizedPrintingDetected                                                                                                                                             |
| SCREENBLOCKER    | This source supports the Event Actions blackout, releaseBlackout, and lockScreen.                                                                                                                                                                                        |
| STORAGEDETECT    | Monitors for external storage to be connected to the agent's machine.<br />Generated Event(s):<br />- RemovableDriveDetected                                                                                                                                             |
| TCIE             | *For future use.*                                                                                                                                                                                                                                                        |