Monitor the Data Files Accessed

Applies To: WatchGuard Advanced Reporting Tool This topic applies to the optional WatchGuard endpoint security module, Advanced Reporting Tool. The Advanced Reporting Tool is available with WatchGuard EPDR and WatchGuard EDR.

The Data Files Accessed tab shows the data that leaves your network and enables you to help detect data leaks and theft of confidential information.

To see data files accessed, from the WatchGuard Endpoint Security management UI:

1. In WatchGuard Cloud, select Monitor > Endpoints.
2. Select Status.
3. From the left pane, select Advanced Visualization Tool.
   A new browser tab opens.
4. From the left pane, select Advanced Reporting > Data Access Control.
5. Select a time period to filter the data on.

6. Click Refresh.
   The dashboard shows information for the time period selected.
7. Select the Data Files Accessed tab.
8. In the Endpoints section, review endpoints that accessed files through non-standard means.
9. In the Users & Extensions section, review file access and execution statistics by user and file extension.

Related Topics

Data Access Control Dashboard

Monitor User Activity

Monitor Bandwidth-Consuming Application Processes and Users

Monitor Outbound Network Traffic