Events

events drive secure work from home in terms of actions taken, supervisor feedback, and historical reporting and analysis as described earlier, event sources monitor the agent's environment according to the agent's assigned feature template and, if the appropriate situation is encountered, one of the appropriate events below is generated and any event actions defined for that event are taken note that the secure work from home client application must be running for these events to be generated authenticationfailuredetected generated when initial face authentication fails feature settings face authentication docid\ z3qodwz1abhtuvlxtpxn2 typical event actions inserttodb, lockscreen authenticationsucceeded generated when initial face authentication succeeds feature settings face authentication docid\ z3qodwz1abhtuvlxtpxn2 typical event actions inserttodb authenticationfacemismatch generated when face authentication and background authentication both fail feature settings face authentication docid\ z3qodwz1abhtuvlxtpxn2 typical event actions inserttodb, lockscreen, backgroundauthenticationfailuredetected generated when on going background face authentication fails feature settings face authentication docid\ z3qodwz1abhtuvlxtpxn2 typical event actions inserttodb, lockscreen backgroundauthenticationsucceeded generated each time the on going background face authentication succeeds feature settings face authentication docid\ z3qodwz1abhtuvlxtpxn2 typical event actions inserttodb blacklistedkeystrokedetected generated each time agent selects ctrl c (copy) or printscreen feature settings computer detection docid\ uchmaomifjt8wjshejexz typical event actions inserttodb camerablockdetected generated when a usb camera is detached no feature settings always enabled typical event actions inserttodb externalmonitordetected generated when an external monitor is connected to the agent's system feature settings computer detection docid\ uchmaomifjt8wjshejexz typical event actions inserttodb gadgetdetected generated when some or all of a gadget (e g , a mobile phone) is detected within the camera's view feature settings gadget detection docid\ dlzebtp28z3ltn9k7ub1s typical event actions inserttodb, lockscreen livenessfailuredetected generated when the system detects that it is not looking at a live person's face (i e , it is a picture) feature settings liveness detection docid\ mvxwg log8z7an9q97wla typical event actions inserttodb, lockscreen multiplefacedetected generated when more than 1 face is detected in the camera's view feature settings shoulder surfing detection docid\ gvva2hmnpx6oeojygednv typical event actions inserttodb, lockscreen networkconnectiondetected generated whenever the agent's computer reconnects to the network after being disconnected feature settings computer detection docid\ uchmaomifjt8wjshejexz typical event actions inserttodb networkdisconnectiondetected generated whenever the agent's computer disconnects from the network after being connected feature settings computer detection docid\ uchmaomifjt8wjshejexz typical event actions inserttodb nofacedetected generated after a successful face authentication when no human face is detected in the camera's view feature settings face authentication docid\ z3qodwz1abhtuvlxtpxn2 (trs noface detection enabled) typical event actions inserttodb, lockscreen removabledrivedetected generated when a removable storage device (e g , usb drive, mobile phone in storage mode) is initial connected to an agent's system feature settings computer detection docid\ uchmaomifjt8wjshejexz (trs storage detection enabled) typical event actions inserttodb screenblock generated when a supervisor raises a screen block on an agent feature settings supervisor settings docid\ qthtitdh2qxbrpvokkgro typical event actions inserttodb unauthorizedprocessdetected generated if an unauthorized process is detected (and killed) by the system see event sources in remote security rules docid\ mxqk0wmz iye61wlioe2h and monitorprocesses in event sources docid\ m7mjn8sylcnypukjurckb processes to be killed are configured in "blacklist" unblockscreen generated when a supervisor raises a screen unblock for an agent feature settings supervisor settings docid\ qthtitdh2qxbrpvokkgro typical event actions inserttodb person detection