The Potential False Activity template provides leaders with clear visibility into suspicious work patterns that may indicate the use of work-mimicking technology. This specialized analytics tool helps you quickly identify unusual activity signals, quantify potential productivity impacts, and take informed action. Detecting and addressing potential false activity can ensure your workforce data accurately reflects genuine productivity.
ActivConnect is available as an add-on for customers on a paid plan. Learn more about ActivConnect here.
Contents
Template access requirements
Before you begin, ensure you have:
- An ActivTrak paid plan and the ActivConnect API (Add-on)
- Your ActivConnect username ([account_number]@activtrak.us) and password. Your account number is in the Account Information menu in ActivTrak; access it via the circle icon in the top right corner.
Access the template
Validate ActivConnect credentials
- Navigate to Google Cloud Console
- Log in with your ActivConnect username ([account_number]@activtrak.us) and password
Take template ownership
To protect your data, ActivConnect restricts data sharing outside the activtrak.us domain. The steps outlined in this section will guide you through setting up permissions to grant data access to anyone within your organization.
- Navigate to https://lookerstudio.google.com and ensure you are logged in under your company’s Google account
- Starting from the ActivTrak for Potential False Activity Analysis (here), make a copy of the report to take ownership of it and enable configuration and editing functions
- Keep the data sources on the prompt and click ‘Copy Report’ to continue.
- Click the Share button in the upper right corner and provide Editor permissions to your ActivConnect user account. This will be in the format of [account_number]@activtrak.us.
Set up data sources
- In a separate tab or incognito window, ensure you are logged in with your ActivConnect user account. This will be in the format of ([account_number]@activtrak.us). Your account number is in the Account Information menu in ActivTrak; access it via the circle icon in the top right corner.
- Then, navigate to https://lookerstudio.google.com
- Select the Shared with Me tab from the left navigation menu and open your copy of the ActivTrak for Looker Studio Financial Loss report
- Enter Edit Mode by clicking the blue Edit button in the top right corner
Potential False Activity Data
- Click on Resource > Manage added data sources
- Click on Edit to the right of Potential False Activities
- Click on Edit Connection at the top
- Change the highlighted “AC_Demo” into your 6-digit account number. There are 3 AC_Demo placeholders to replace.
- Click on Reconnect at the top right
- Click Apply in the pop-up window to confirm the changes. Then click Done once complete.
Click to view code
WITH filtered_logs AS (
SELECT
logs.*,
ROW_NUMBER() OVER (PARTITION BY user_name ORDER BY local_datetime) AS rn
FROM
`us-activtrak-ac-prod.AC_Demo.events` AS logs
WHERE
local_date = DATE_SUB(CURRENT_DATE(), INTERVAL 60 DAY)
),
target_entries AS (
SELECT
user_name,
rn
FROM
filtered_logs
WHERE
application_or_site LIKE '%artificial input%'
),
all_entries AS (
SELECT
fl.*,
CASE
WHEN fl.application_or_site LIKE '%artificial input apps%' THEN 'Software'
ELSE 'Hardware/Pattern'
END AS jiggler_type,
IF(
INSTR(fl.application_or_site, 'Possible causes:') 0,
SUBSTR(fl.application_or_site, 1, INSTR(fl.application_or_site, 'Possible causes:') - 1),
fl.application_or_site
) AS truncated_application
FROM
filtered_logs fl
JOIN
target_entries te
ON
fl.user_name = te.user_name
AND fl.rn = te.rn
)
SELECT
* EXCEPT(rn, application),
truncated_application AS application
FROM
all_entries
ORDER BY local_datetime
;Extended Duration Events Data
Repeat the same steps as the Potential False Activity data set up, but pick the Extended Events data source this time
Click to view code
SELECT
user_name,
application_or_site,
application,
computer_name,
executable,
local_date,
local_datetime,
CASE WHEN EXTRACT(DAYOFWEEK FROM local_date) = 0 or EXTRACT(DAYOFWEEK FROM local_date) = 6 THEN 'Weekend'
ELSE 'Weekday'
END AS day_type,
titlebar,
duration_sec
FROM
`us-activtrak-ac-prod.AC_Demo.events`
WHERE
duration_sec 1800
AND application_or_site NOT LIKE '%Remote Desktop%'
AND application_or_site NOT LIKE '%CDViewer%'
AND application_or_site NOT LIKE '%workspaces%'
AND application_or_site NOT LIKE 'LockApp.exe'
AND application_or_site NOT LIKE '%Visual Studio%'
AND application_or_site NOT LIKE '%MySQL%'
AND application_or_site IS NOT NULL
AND user_name NOT LIKE '%autopilot%'
;User Groups Data
- Repeat the same steps as the two data sources above, but pick premium_user_groups
- Enter your 6-digit account number in the Dataset search box, and click on your account number. In the Table column, click on premium_user_groups. Click Reconnect and then Apply in the pop-up window to confirm the changes. Click Done once the setup is complete. Click Close to exit the data source configuration window.
Sharing Reports
- Click the Share button to open the sharing menu
- Select the gear icon in the top left corner to define access levels to download and print
- Once you have completed your desired configuration, add the individuals you want to share the report with and assign them the appropriate permissions
Scheduling Reports
- To configure a scheduled delivery of a report, click the drop-down arrow next to the View/Share tab and select Schedule email delivery
- Add the recipient's email address(es) and define your desired settings for Pages, Start Time, Repeat (frequency) and Message as shown in the image below
- Click Schedule when finished