The User Activity page lists your organization's users and the detections associated with each user by Agent Risk Manager. It also shows their most recent browser extension check-in and their Acceptable Use Policy (AUP) status. The user list comes from your KnowBe4 account. Use the sections below to access the User Activity page, find a user and review their activity, view user details, and export user activity.
Detection data comes from your connected integrations, including the KnowBe4 Browser Extension. If you haven't connected an integration yet, see our quickstart guide.
To see your most recent detections across all users, use the Dashboard or the AI Activity Log.
Access User Activity
How you access the User Activity page depends on whether you use the classic KnowBe4 console or the KnowBe4 Platform. Follow the steps in the matching subsection.
Classic KnowBe4 Console
To access User Activity from the classic KnowBe4 console, follow these steps:
- Log in to your classic KnowBe4 console.
- In the top-left corner of the screen, select the grid icon. A drop-down menu will display.
- In the drop-down menu, select Agent Risk Manager.
- In the sidebar, select Users, then select User Activity.
KnowBe4 Platform
To access User Activity from the KnowBe4 Platform, follow these steps:
- Log in to your KnowBe4 Platform.
- In the sidebar, select Agent Risk Manager.
- Under Users, select User Activity.
Find a User
The User Activity page lists your users in a table. To find a specific user, enter a name or email address into the search box at the top of the table.
To filter the table by acceptable use policy status, select a status from the AUP status drop-down menu. Options include All, Acknowledged, Shown, and Not Shown. This filter applies only to the current page of results, so the table may not show every user with that status.
To download the full filtered table, see Export User Activity.
Review a User's Activity
Each user entry in the table includes the following information:
-
User: The user's initials, name, and email address.
Note:If no name is on file, the email address displays as the name. - Detections: The total number of detections that Agent Risk Manager has associated with the user. If the user has no detections, a dash icon displays.
- Last Detection: The date and time of the user's most recent detection, along with a detailed event name. If the user has no detections, a dash icon displays.
- Browser Check-in: The date and time of the user's most recent browser extension check-in. If the user hasn't checked in yet, a dash icon displays.
-
Policy: The user's acceptable use policy status, either Acknowledged or Pending.
Note:Users whose AUP status is Shown and users whose status is Not Shown both display as Pending. To see which status applies, open the user's details.
View User Details
To view more information about a user, select the user's entry in the table. A side panel displays the user's name and email address, followed by these tabs:
- Policy: The user's acknowledgment status for your Acceptable Use Policy. The status displays as Acknowledged, Shown, or Not Shown. Beneath the policy name, the published version and its date display, or No version published yet displays if you haven't published a policy.
- Detections: The user's 100 most recent detections from the last 30 days. Each entry shows a category badge, the date and time, and the agent and tool involved. If the provider didn't supply an agent or tool, Unknown agent or Unknown tool displays.
- Extension: Details from the user's most recent browser extension check-in, including their OS, Hostname, OS user, Browser, Browser version, Browser profile, Extension version, and Latest extension. This tab also displays when the extension was last Updated on device for the user. If the user hasn't checked in, the tab reads No check-in received from this user yet.
To return to the user table, select the X icon in the top-right corner of the panel.
For more information about events and detection categories, see our guide.
Export User Activity
To download your user activity as a CSV file, select Export in the top-right corner of the page. The file includes every user who matches your AUP status filter, not only the users in the current page of results.