Filters (C2k)
- 1 Filter Options
- 1.1 User
- 1.2 PC
- 1.3 Date
- 1.4 ID
- 1.5 Phrase
- 1.6 Source
- 1.6.1 Keyboard
- 1.6.2 Application
- 1.6.3 NET
- 1.6.4 Self-Capture
- 1.6.5 Chrome Keyboard
- 1.6.6 Chrome
- 1.6.7 Browser
- 1.6.8 Browser Keyboard
- 1.6.9 Category
- 1.6.10 Severity
- 1.6.11 Classification
- 1.6.12 Website
- 1.6.13 Application
- 1.6.14 Client Version
- 1.7 Contains/Equals
- 1.8 Disabled/Active
- 2 Example Filter
- 3 Excluding Results
- 4 Saving and Loading Filters
- 4.1 Remove a Filter
Filters are an important way to view specific data and can be used to customise the way captures are displayed, cutting down the time spent within the console and ensuring that relevant data is shown for efficient management.
To access the filters, click on the Filters button.
Filter Options
User
One or multiple usernames can be specified. The field uses a ‘like’ search so the exact username does not need to be entered.
PC
A specific device name can be specified to find all captures from one or multiple devices. Also uses a ‘like’ search.
Date
Contains several options to filter based on a date or time range.
Hovering over an option will give a description of what the button does.
Selecting Other will allow you to specify your own date range and also allows for filtering based on time as well.
ID
Each screenshot is assigned an ID, this can be entered to find a specific capture quickly.
Phrase
A phrase can be specified to find all captures with that phrase only.
Source
A capture source can be selected to see all captures from that source only. See below for an explanation for each source type.
Keyboard
These are Windows captures generated by the keyboard monitor.
Application
These are Windows captures generated by the OCR engine. Captured phrases will be highlighted for better visibility.
NET
These are captures from the Securus NET proxy. Captured phrases are highlighted with a red box.
Self-Capture
These are captures from the self-capture function in the client which is disabled by default.
Chrome Keyboard
These are captures from the Chrome extension, generated by the key strokes.
Chrome
These are captures generated by the Chrome extension.
Browser
These are captures from the Securus safeguarding browser for iPads.
Browser Keyboard
These are captures from the Securus safeguarding browser for iPads, generated by key strokes.
Category
One or multiple categories can be defined to find captures from the specified categories only.
Severity
Select a severity range to view captures with those severities.
Classification
Allows for the filtering of certain website types, for example “News” and “Social Media” etc.
Website
Allows for the filtering of specific websites, this can useful for finding all captures that were created on Facebook or YouTube. It is not necessary to type in the full address.
Application
Filters for the specified application name only, such as teams.exe or chrome.exe.
Client Version
Allows you to search for captures from a specific version of the software.
Contains/Equals
By default, searches are a “like” or “contains” condition.
On the far right of the Filter menu there is a toggle option to change the filter to an Equals type search or a Contains type search.
Equals will aim to match what has been typed only and Contains will find anything containing the typed entry.
Click on Equals/Contains to switch it to the next type.
Disabled/Active
When a filter is applied this will switch to show that its Active. This button is on each filtering option, clicking this button again will switch it to Disabled, removing this part of the filter.
Example Filter
In this example, Source is the filter selected and Keyboard has been selected as the sub option. We have also elected to search for the Phrase ‘our secret’ as well.
This will display all keyboard only captures for this phrase once the filter has been set to Active. More criteria can be added by choosing options and entering the relevant information.
For example, a category can be chosen to display keyboard captures from one or several categories, further narrowing the capture search.
Excluding Results
It is also possible to filter out settings by de-selecting the Include button.
The option will change to say Exclude and will filter out any results based on what was deselected.
This can be done for most of the filter options.
Saving and Loading Filters
Filters can be used in a one-off situation or can be saved for later use.
Click on the Save Filter button and give the filter a name.
Click Save to finish.
To access and use saved filters, click on the Load Filter button. Saved filters will be selectable from the list.
Filters can be activated from this list by clicking the Active button.
Remove a Filter
To remove the currently applied filter and return to normal viewing, simply click on the Remove Filter button.
This option will only be active if a filter is applied.
Document number/reference: SEC-KB-C2k-008
Classification Level: Public
Related Articles: