Device Details

The following table lists the fields in the Device Details area.

Field	Description
Device name	The name of the device. inSync checks the hostname in every backup cycle. If the host name of the device gets changed, it will automatically get updated.
Device OS	The name, version, and platform details of the OS running on the user device.
User	The username to whom the device belongs.
Profile	The profile name associated with the user to whom the device belongs.
Device Status	The status of the device.
inSync Client version	The version number of the inSync Client that is installed on the device.
Activated on	The device activation date and time.
Replace device status	Note: The status displayed when the device is marked for Replace Device  The following status is displayed at different stages during device replace Status Stage Marked for Replacement Is displayed when the user's old device is marked for replacement. Activated Successfully by Admin Is displayed when the device is successfully activated by the administrator. Activation by Admin Failed Is displayed if the activation process initiated by the administrator fails. Admin Initiated Restore in Progress Is displayed when the administrator initiated restore is in progress. Admin Canceled Restore Is displayed if the replace device process is canceled by the administrator. Admin Initiated Restore Completed Is displayed when the administrator initiated restore is completed. Activated Successfully by User Is displayed when the device is successfully activated by the user. Activation by User Failed Is displayed when the device activation initiated by the user fails. User Restore in Progress Is displayed when the user's data from the old device is being restored to the temporary location on the new device. User Canceled Restore Is displayed If the replace device process is canceled by the user. User Restore Completed Is displayed when the data from the old device has been successfully been restored on the new device either at the temporary location or in the destination folders. After this stage, the administrator's Client, which was activated on behalf of the user, will be deactivated. Marked For Replacement With <new device name> Is displayed when the user's old device is marked for replacement with the new device when the restore is triggered. This status is displayed on the source device. Replaced With <new device name> Is displayed when the old device is replaced with the new device and the restore is completed on the new device. This status is displayed on the source device.

Backup Summary

The following table lists the fields in the Backup Summary area.

Field	Description
Last backup status	The status of the last backup from the device.
Backup data	The amount of data that has been backed up from the device during the last backup.
Total backup data	The amount of data that has been backed up from the device.
Last completed backup	The number of days since the device was successfully backed up.
Files backed up	The number of files that were backed up from the device during the last backup.
Files missed	The number of files that could not be backed up from the device during the last backup.
Backup start time	The date and time when the last backup started.
Backup end time	The date and time when the last backup completed.
Bytes transferred	The amount of data that was transferred from the device to the inSync Master during the last backup.

DLP Details

The following table lists the fields in the DLP Details area.

Field	Description
Platform	The type of operating system on the device.
DLP profile	The profile to which the user of the device is linked.
Last connected on	The date and time when the device last connected with inSync Master.
DLP status	The DLP status of the device.

Map

The MAP area displays the last known device location as ON if device trace is activated for the device.

Data Activity Trend

Note: Available only to inSync customers.

The Data Activity Trend is a visual representation of updates in each snapshot. Over a set of backup jobs, inSync gathers information on how the files inside configured folders on a device have changed. Every time the inSync Client executes a backup job and creates a snapshot, inSync Cloud uses a set of parameters, and compares the updates in the current snapshot with the previous snapshots. With every backup job, inSync monitors:

• The number of files deleted
• The number of files added
• The number of files modified
• The number of files encrypted 

Using the parameters above, the Data Activity Trend area renders a chart that indicates the updates in each snapshot. If inSync detects anomalous behavior, the snapshot is flagged in the graph. Such an anomalous behavior can indicate a potential threat in the device such as a ransom ware attack. 

You can click each bar in the Data Activity Trend chart to launch the Restore Data window. When the Restore Data dialog is launched, under the list of snapshots, the anomalous snapshot is highlighted with a warning symbol. 

Note: If the end-user has enabled the privacy settings, you cannot run admin restore on the device. When you click on a bar in this case, you see an error message in place of the Restore Data window. 

When you select the snapshot, a banner is displayed at the top of the Restore Data dialog that indicates unusual data activity detected in this snapshot. 

You can use the Download Logs button in the Restore Data dialog to download a .csv log that describes the changes in files in this snapshot compared to the last snapshot, and can help you identify files that led inSync to flag this snapshot. You can either manually analyze the .csv log or use a third party tool for analysis that can detect potential threats. The .csv log contains the following fields that can help you in analyzing it:

Field	Description
File Name	Name of the file in the snapshot [turn it into a table]
Full Path	Path of the file on the device
File Type	File extension indicating the file type. For example, .png, .jpeg, and .mov.
File Size	Size of the file (in bytes).
File Modified Timestamp	Date and time when the file was modified.
Operation	Describes whether file was modified, added, or deleted.
File Created Timestamp	Date and time when the file was created.
SHA1 Checksum	Hash value of the file indicating bytes modified in the file. Can be used to detect a potential threat.
File Owner	Name of the file owner.

The Download Logs button is available for snapshots created after the feature is enabled. The Download Logs option is not available for the snapshots created before the feature is enabled. 

Note: Logs are not available for the first snapshot after unusual data activity is enabled. If you click Download Logs for the first snapshot, you see the Page Not Found (HTTP 404) error message.

From the Restore Data dialog, you can also select a snapshot that inSync did not flag for unusual data activity, and restore data on your device using that snapshot.