In this post, we’ll be covering User/Device Geolocation in GAT Shield.
You can view the video tutorial instead:
This feature will allow an Admin to track and locate all devices using advanced filters.
Start off by navigating to the User/Device Geo Reporting section in GAT Shield.
In this area you will have access to the Geolocation window, here you’ll see all devices currently enrolled on your domain being viewed by Shield UUID or you can also choose to view devices by IP.
You’ll notice these numbers around the map, these are devices that are close to each other and have been grouped up together.
Clicking on the value will zoom in and spread the devices out more accurately.
After zooming in we can now see these computer icons, these are our devices.
If you click a device you will be shown it’s Shield UUID, OS, Public IP, City, Country, User and Last activity. You can also click to show the coordinates on Google Maps.
Scrolling down you will see a detailed list of all the devices connected to your domain.
You can view their Shield UUID, which is a universal unique ID given to every user per device, their Shield version, The serial number of the device, the OS, their public & private IP, location details as well as the user’s email and activity.
Clicking the marker button will locate this user on the map.
The eye icon will give you more information about that user’s device, as well as details of their device such as CPU and memory usage.
In this example we’re going to search for any Windows devices that have more than one user logged into them, we’ll start off by clicking the filters button.
We’ll select OS and type the name of the operating system, in this example it’s Windows, we’ll then add another rule and select Other users, we’ll pick ‘is not empty’ and apply the filter.
We now have my result, to see the other user who has logged into this device we’ll select the eye icon. I can now see that another user from a different domain has logged onto the same device as our user.
In our next example, we’ll look for how many devices a user has logged into, we’ll delete our filter and apply a new one, then we’ll select User and enter the email of the user we’re looking for.
We can see that this user has logged into five different devices. If we would like I can click the export data button and select between a direct CSV download or one to Google drive.
We’ll select Google Drive, a small window should appear. Simply click to view and download.
We can now see all the data from our search in the spreadsheet.