USB Threat Evaluation - Detection and Reporting System
User Activity Report for User AlCapone
Date Range: 28-Apr-2007 - 28-APR-2007
Group: NextSysSecure, Inc Run Date: Apr 28, 2007 
User Name System Name Network Address Activity Date  Action Policy Accept Filename
AlCapone COMPUTER2 192.168.0.100 2007-04-28
15:37:55
Startup    
AlCapone COMPUTER2 192.168.0.100 2007-04-28
15:40:03
DeviceInserted    
AlCapone COMPUTER2 192.168.0.100 2007-04-28
15:40:06
PolicyAction No , Event#(2)  
AlCapone COMPUTER2 192.168.0.100 2007-04-28
15:40:14
DeviceRemoved    
AlCapone COMPUTER2 192.168.0.100 2007-04-28 15:41:07 DeviceInserted    
AlCapone COMPUTER2 192.168.0.100 2007-04-28 
15:41:09
PolicyAction Yes , Event#(2)  
AlCapone COMPUTER2 192.168.0.100 2007-04-28
15:42:19
FileCopied   Source->C://Documents and Settings//AlCapone//My Documents//Customer List.xls, Event#(3) F://Customer List.xls 
AlCapone COMPUTER2 192.168.0.100 2007-04-28 
15:43:19
FileModified   Event#(4) F://Customer List.xls
AlCapone COMPUTER2 192.168.0.100 2007-04-28
15:43:19
FileModified   Event#(5) F://My List.xls
AlCapone COMPUTER2 192.168.0.100 2007-04-28
15:44:02
FileDeleted   Event#(6) F://Old Customer List.xls
AlCapone COMPUTER2 192.168.0.100 2007-04-28
15:44:06
DeviceRemoved    
Total Activity Count for User "AlCapone" = 11 
The User Activity Report displays all activity events for a selected User that occurred during an selected period of time.  It is another forensic type report that can detail the exact characteristics of an typical User's USB Activity.