HUhubstaff
unusual_activities

List unusual activities

Changed on

Returns a collection of unusual activities (anomalous behavior patterns) for the given organization.

Results can be filtered by user_ids[], time_slot[start]/[stop], confidence_level, and unusual_activity_type.

Note: Unusual activities can be removed automatically by the system (e.g. after silent app member merging).

screenshot_ids lists only the screenshots the caller may see, as on the Screenshots page. top_apps_in_use, top_urls_visited and suspicious_apps are empty when the caller may not see the member's screenshots or the member hides their apps and URLs.

get/v2/organizations/{organization_id}/insights/unusual_activities

Request

  • Base URL
    https://api.hubstaff.com
  • Auth
    OAuth 2
    Authorization codehttps://account.hubstaff.com/authorizations/new
    Token URLhttps://account.hubstaff.com/access_tokens
    Scopeshubstaff:read, hubstaff:write

Path parameters

organization_idinteger required

Query parameters

page_start_idinteger

The page start ID.

page_limitinteger

The default page size

time_slot[start]string date-time required

Start time (ISO 8601)

time_slot[stop]string date-time required

Stop time (ISO 8601, Exclusive)

user_idsinteger[]

List of user IDs

includestring[]

Specify related data to side load.

include_secondary_activitiesboolean

DEPRECATED: Does nothing, all unusual activity is shown by default

confidence_level'high' | 'medium' | 'low'

Filter by confidence level

unusual_activity_type'consistent_persistent_activity' | 'consistent_variable_activity' | 'unusual_high_mouse_activity' | 'unusual_high_keyboard_activity' | 'long_period_of_single_mouse_activity' | 'long_period_of_single_keyboard_activity' | 'breakless_work' | 'sustained_high_focus_time' | 'automation_like_activity' | 'suspicious_activity'

Filter by unusual activity type

Response

A list of unusual activity

Changes