Application analytics | EPM-WM Pathfinder

What are applications?

Applications, as defined by EPM for Windows and Mac, include the following:

Windows application types

macOS application types

The Applications page

1. Analytics tabs: Access the Dashboard, Events, Applications, and Users pages.
2. Filters: Select a filter to refine your results. Click Clear Filters to remove all filters from your results.

   Available filters

   • Time Period
   • Computer groups
   • Operating system
   • Application type
   • Admin required
   • App description
   • App name
   • Application group name
   • Downloaded status
   • Drive type
   • Elevation method
   • Elevation action
   • Message name
   • On demand
   • Policy name
   • Publisher
   • Publisher Exists
   • Workstyle name

3. Save View and Load View: Save your filter preferences and load the view later for quick access to your most frequently-used preferences.
5. Columns: Details for each event.

   Available columns

   • Application name
   • Versions
   • Admin Required
   • Processes
   • Users
   • Computers
   • Date Discovered
   • Last Event
   • Operating System
   • Group Name(s)
   • Application Type
   • Publisher
   • Event Action
   • Application Group Name
   • Message Name
   • Elevation Method
   • On Demand
   • Drive Type
   • Workstyle Name
   • Policy Name

Add an application to a policy

ℹ️

You can only add an application to an unlocked policy.

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. From the top left of the page, click > Endpoint Privilege Management for Windows and Mac > Analytics. The Analytics page displays.
3. Click Applications.
   The Applications page displays.
4. Locate the application you want to add to a policy.
5. In the application row, click .
   The Application panel displays.
6. Select an unlocked policy and available application group from the drop-down list.
7. Click Add and Edit Policy.
   The Policy Editor opens and the Applications Group page displays.
8. Edit the application settings.
9. Click Save Changes.
   The policy saves.

View an application's details

👍

Best practices

Use the application details to:

• View how often an application runs in your estate and the associated behavior at the end user level (for example, how often an event action occurred for an application over a given time period).
• View the number of users running an application, the reason given if one is required, all associated events, and metadata (such as versions run, application type, etc.).
• View event details specific to the application.

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. From the top left of the page, click > Endpoint Privilege Management for Windows and Mac > Analytics. The Analytics page displays.
3. Click Applications.
   The Applications page displays.
4. Locate the application you want to view.
5. Click the Application Description.
   The Application Details page displays is where you can review at-a-glance user and event activity. If there is more than one version of an application, expand the Application Description and click the link for a specific version to view the associated activity.
6. Optionally, click the User Activity or Events tabs to display additional details for each logged user or event activity.

Export to CSV

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. From the top left of the page, click > Endpoint Privilege Management for Windows and Mac > Analytics. The Analytics page displays.
3. Click Applications.
   The Applications page displays.
4. Clickto export all analytics data results in the currently filtered result set. The CSV download can include up to 5 million records with detailed information on account privileges.
5. When saving an export file for applications:
   1. Select the maximum number of records to download.
   2. Select the columns to include. Select In View to include only the columns currently selected in your view. Select All Available to include all columns even those not currently displayed.
   3. Enter a file name.
   4. Click Prepare Download.
6. Click the Notifications icon when the file is ready to download.

Save and load views

Recommended views

The recommended views provide a selection of the most useful predetermined views. Use the views to review collected data and make informed decisions around policy editing.

1. Sign into app.beyondtrust.io.
   The BeyondTrust Home page displays.
2. From the top left of the page, click > Endpoint Privilege Management for Windows and Mac > Analytics. The Analytics page displays.
3. Click Applications.
   The Applications page displays.
4. Click Load View, and then click the Recommended Views tab.

Recommended views for applications load with the default filters.