Device Inventory

User Management

The User Management category monitors user account activity and login behavior across Windows, macOS, and Linux systems. It tracks authentication events — including timestamps, login types, and source IPs — along with session IDs, user identifiers, group memberships, and password changes. The category also captures diagnostic data related to application crashes during user sessions.

Login History

Title

Description

OS Support

User Logins

Tracks user authentication events, including successful and failed login attempts. Records timestamps, user identifiers, and source IP addresses for each event.

Supported on WindowsSupported on MacOSSupported on Linux

User Login History

Tracks user authentication events including successful and failed login attempts. Records timestamps, IP addresses, and device information associated with each login.

Supported on WindowsSupported on MacOSSupported on Linux

Windows Logon Sessions

Tracks user authentication events on Windows systems, including login and logout times. Records session details such as user account, session duration, and login type.

Supported on WindowsSupported on MacOSSupported on Linux

Windows Logon Server Device Hostname

Tracks the hostname of the device that processed the login request during user authentication. Records the server involved in handling the logon event for auditing and troubleshooting purposes.

Supported on WindowsSupported on MacOSSupported on Linux

Windows Logon Time

Tracks user login events on Windows systems, including timestamps of successful and failed logon attempts. Records details such as user account, logon type, and source machine for auditing and security analysis.

Supported on WindowsSupported on MacOSSupported on Linux

User Information

Title

Description

OS Support

Username

Tracks the unique identifier assigned to each individual accessing the system. Captures the exact string used for login and identification purposes.

Supported on WindowsSupported on MacOSSupported on Linux

User

Tracks the number of individual accounts registered within the system. Monitors attributes such as account status, creation date, and associated permissions.

Supported on WindowsSupported on MacOSSupported on Linux

User Session ID

Tracks unique identifiers assigned to individual user sessions during system access. Reports session continuity and helps correlate user activities within a given session timeframe.

Supported on WindowsSupported on MacOSSupported on Linux

macOS User Password Set Time

Tracks the timestamp when a user last set or changed their password on the system. Provides information for auditing password update activities and compliance verification.

Not supported on WindowsSupported on MacOSNot supported on Linux

groups

Tracks the collections of users assigned to specific roles or permissions within the system. Reports the associations that define access levels and organizational structure.

Supported on WindowsSupported on MacOSSupported on Linux

Service User ID

Tracks unique identifiers assigned to individual users within the system. Monitors the association between users and their respective service accounts.

Supported on WindowsSupported on MacOSSupported on Linux

Username of Last Logged in User

Tracks the identifier used by the most recent individual to access the system. Records this information to support auditing and user activity analysis.

Supported on WindowsSupported on MacOSSupported on Linux

Usernames home directory

Tracks the directory paths assigned to individual user accounts on the system. Reports the location where each user's personal files and settings are stored.

Supported on WindowsSupported on MacOSSupported on Linux

macOS UUID

Tracks unique identifiers assigned to individual user profiles within the operating system. Reports on the presence and consistency of these identifiers across user accounts.

Supported on WindowsSupported on MacOSSupported on Linux

User Hidden in OpenDirectory

Monitors user accounts that are configured to be hidden within the directory service. Tracks the visibility status of user entries to control access and display in directory queries.

Supported on WindowsSupported on MacOSSupported on Linux

Windows SID

Tracks unique security identifiers assigned to user accounts within the system. Associates these identifiers with user profiles for authentication and access control purposes.

Supported on WindowsSupported on MacOSSupported on Linux

User Diagnostics

Title

Description

OS Support

Application Crash User ID

Tracks user identifiers associated with application crashes. Provides insight into which users experience failures during application execution.

Supported on WindowsSupported on MacOSSupported on Linux

Application Crash PID

Tracks process identifiers associated with application crashes to help identify the specific instances causing failures. Reports the PID values to assist in diagnosing and troubleshooting user session issues.

Supported on WindowsSupported on MacOSSupported on Linux

Application Crash date and time

Tracks the date and time when an application experiences a failure. Records the exact timestamp to assist in diagnosing user-related issues.

Supported on WindowsSupported on MacOSSupported on Linux

Application Crash Path

Tracks file system locations where application crashes occur during user sessions. Reports paths to assist in diagnosing and resolving user-specific application failures.

Supported on WindowsSupported on MacOSSupported on Linux

5

View all Device Inventory