Unknown Users

Use this report to identify server accounts that have been used but are not mapped to a Keystrike user. The report lists Terminator accounts, such as server accounts, that were used during the selected date range without a corresponding Keystrike user mapping. An account may appear here because a legitimate user is connecting without the Keystrike client installed. In that case, additional Keystrike clients may need to be deployed. Accounts may also be legacy or unused accounts that should be reviewed and, where appropriate, removed.

The table shows the server account used to connect, the destination server, connection type, source IP address, when the account was last seen, and how many times it was observed during the selected date range.