What the Agent Collects

The ActivityPulse agent is a single lightweight Windows service that runs silently on each endpoint. It captures activity metadata across 19 independent modules, from web browsing and application usage through to AI prompts, USB file transfers, and geolocation. Every module can be enabled, disabled, or configured independently per agent, giving you full control over what is collected and what is not. Below is everything the agent can capture.

Activity Monitoring

Core activity tracking across browsers and applications

Web Browsing

Full URL and page title for every site visited. Domain extraction, visit duration, incognito detection, and browser profile identification. Works across 25 browser engines without extensions.

Application Tracking

Which application has foreground focus and for how long. Process name, window title, application publisher from file metadata. Active vs idle time per app with productivity classification.

Input Activity

Keystroke and mouse click counts per interval. Scroll and movement tracking. Foreground app at time of capture. Input engagement scoring per application.

Sessions

Idle start and end timestamps with duration. Last active process before idle. Automatic detection from keyboard and mouse inactivity.

Web Search

Search query extraction from 27+ search engines including Google, Bing, DuckDuckGo, and specialist engines. Query text, engine, and timestamp.

Server-side capability derived from the Web Browsing module.

Content Monitoring

Track data movement through clipboard, email, downloads, and print

Clipboard

Every copy/paste operation with content type (text, files, images, rich text). Text preview, file paths, source application and window title.

Email

Outlook Classic email tracking. Subject line, sender, recipients (To/CC/BCC), direction, attachment count and names, total attachment size. Mass email detection.

Downloads

Every browser download with source URL, referrer, MIME type, file extension, file name, path, and size. Incognito download detection.

Print Jobs

Document name, printer name, page count, job size, colour and duplex settings. Enterprise tier captures actual rendered document content.

Screenshots

Periodic and app-switch triggered desktop capture. Multi-monitor support. Configurable quality, resolution, and interval per agent. Stored encrypted.

Terminal Commands

Command execution monitoring with command text, shell type, and exit code. Tracks PowerShell, CMD, and terminal activity.

Devices & Storage

Monitor removable media, peripheral devices, and processes

USB & Removable Media

USB drives, MTP phones, SD cards, optical drives. Device serial number, manufacturer, capacity. File operations with source process tracking.

Camera & Microphone

Which applications are using the camera or microphone, with start/stop times and duration. No audio or video content is captured.

Network & Location

Track network connections, devices, and physical location

WiFi & Network

Connected and nearby WiFi networks with signal strength and security type. VPN detection. Network adapter details including IP, DNS, and gateway.

Bluetooth

Device discovery and pairing events. Device type, manufacturer, and connection state tracking. Identifies connected peripherals.

Geolocation

Device location via GPS, WiFi, or cell tower. Server-side reverse geocoding provides city, region, country, and address. Distance-based deduplication.

Security & System

System events, endpoint health, processes, and search activity

System Events

Logon, logoff, lock, unlock, RDP sessions, startup, shutdown, and audit policy changes. Tracks both local and remote session types.

System Health

CPU usage, memory utilisation, disk space, and network I/O. Identify machines under resource pressure or running unusual background processes.

Processes

Process execution tracking with start/stop, duration, parent process chains, application metadata, and company name from file version info.

AI Monitoring

Purpose-built monitoring for 33+ AI services

AI Prompt Capture

Captures typed prompts, pasted content, and copied responses across 33+ AI services including ChatGPT, Claude, Gemini, Copilot, and DeepSeek. Sentiment analysis on every prompt.

AI File Detection

Detects when employees upload files to AI services. Captures file name, path, extension, size, and SHA-256 hash. Multiple detection methods for reliability.

Server-side capability derived from the AI Usage module.

Looking for Intelligence Engines?

See how our 10 purpose-built engines transform raw module data into actionable intelligence.