Using Keystroke for User Behavior Analytics

keystroke tracking is utilized to understand the behavior of users on the kron pam login screen and cannot be activated unless mfa is enabled for the user group keystroke tracking information will be reset if mfa users do not log in to the login screen within a certain number of day this number of days can be defined by parameter the user's username and password keyboard typing speeds and accuracy will be checked and measured with a threshold value if the user does not exceed the threshold value, they will log in without the need for mfa to enable keystroke navigate to administration > multi factor authentication > user group management click options click enable otp for the user group when enable otp is clicked, the enable keystroke button will become active click enable keystroke keystrokes can be tracked locally or sent to another device for analysis the following parameters in system config manager are necessary parameter name description sample parameter value keystroke last login success before days if the user doesn't have any mfa authentication login(login success with the token) last n days, keystroke prediction is not enabled default value 15 keystroke api url keystroke server api url https //1 1 1 1 5000/predict https //1 1 1 1 5000/predict keystroke username threshold username prediction success threshold the prediction distance must be under the threshold default value 0 5