An alert is triggered upon opening in Windows Explorer a folder which is included in black-listed unauthorized folders.

An alert is triggered upon browsing to Social Media Sites on a machine that functions as a server. This action could indicate an intent to steal sensitive information from the server, or to download files/folders to this server.

An alert is triggered upon opening in Windows Explorer one of the system folders as defined in external list.

An alert is triggered upon performing an action on Mac that requires administrative privileges to be set via the authentication service dialog.

An alert is triggered whenever the Windows Security popup that prompts for entering credentials is displayed to the user. This happens upon trying to access a web-based system or a folder that requires credentials.

An alert is triggered upon viewing or editing sensitive documents on Mac via document editing tools. It builds on the [CMD-P] for the Print event but combines it with the application for editing documents - either Numbers or Microsoft Word (can be added)