Skip to main content

Windows - Current User Sessions

Summary

This dataview displays information about existing user sessions on audited machines.

The information displayed in this dataview is populated into the custom table @plugin_proval_usersessions by the script @User Session Audit.

Dependencies

  • @plugin_proval_usersessions -- Table
  • @User Session Audit [DV] -- Script

Columns

ColumnDescription
ClientClient Name
LocationLocation Name
Computer NameComputer Name
UserLast logged in user
Agent TypeInformation about whether the agent is a workstation, laptop, or server.
Agent Asset TagAsset tag information, if found
Friendly NameFriendly name information of the agent, if provided.
ManufacturerManufacturer of the computer
Agent OSOperating System information of the agent.
OS VersionOS version of the agent
StatusIndicates whether the agent is online or offline.
Master PCInformation about whether the agent is a Master PC or not.
Probe PCInformation about whether the agent is a Probe or not.
Logged in UserDetailed list of all logged-in users on the agent during the execution of the dependent script.
Session StateProvides information about whether the logged-in user is active or disconnected.
Logon DateThe last logon date of the user.
Session Length (Minutes)The active session duration of the user.
TimestampThe date and time when the script was executed.
Contact (All Possible Columns)Contains all possible contact details in the script such as contact email, password set, last name, first name, etc.
Location (All Possible Columns)This dataview includes all possible location details such as location address, location phone number, etc.
Client (All Possible Columns)Contains all possible client details such as client city, client phone, etc.
Computer (All Possible Columns)Contains all possible computer details such as Computer OS Build, Type, Manufacturer, etc.