Desktop Application Usage Tracking

Kabeen allows tracking native Windows and MacOS applications

Kabeen user agents collect application navigation from the Windows and macOS windowing system. All these applications, when displayed on the user's screen, are linked to a process that needs to be described in your application settings in the Kabeen inventory.

Prerequisites

  • Kabeen user agents must be deployed and functional on workstations
  • Supervised applications must be able to display on the user's workstation: It is not possible to supervise a background application (example: EDR/XDR Agent)

Configure Native Application Tracking

  1. From your application inventory, click on the application to configure
  2. Click the Settings icon (⚙️) at the top right of the page
  3. Navigate to the Usage section

In the Native Application Usage Tracking section: Enter the Name of the application to track as it appears in the application's executable description on the workstation.

Identify an Application's Description

To retrieve the description of an application running on a workstation, you can use several methods. In all cases, it is the Description field that must be entered in Kabeen, not the name of the executable file (excel.exe, acrobat.exe...).

From the executable file properties

Right-click the application's .exe file, then open PropertiesDetails tab. The File description field contains the value expected by Kabeen.

From Task Manager (Processes tab)

When the application is running, open Task Manager (Ctrl + Shift + Esc). The Processes tab directly displays the Description of each application (not the file name). Be careful not to keep any "(32-bit)" annotations.

From Task Manager (Details tab)

The Details tab lists processes by executable name, identifier (PID), user, CPU and memory. To display the description:

  1. Right-click any column header
  2. Choose Select columns
  3. Check Command line description (or Description depending on the Windows version)

The added column provides the value to report in Kabeen.

From the command line (PowerShell)

PowerShell exposes the description of each process directly:

Get-Process | Select-Object ProcessName, Id, Description | Sort-Object Description

To filter on a specific application:

Get-Process excel | Select-Object ProcessName, Id, Description

In CMD, the tasklist command only returns the executable name. If you still want to retrieve the description in CMD, use wmic process get Name,ProcessId,Description (deprecated utility but still present on most Windows workstations).

In Kabeen, this name is not case-sensitive.

Some examples:

  • chatgpt for a locally installed ChatGPT application
  • Microsoft Excel (not excel.exe)
  • Adobe Acrobat Pro (not acrobat.exe)

Add Multiple Clients for the Same Application

  1. Click Add additional name
  2. Repeat the configuration for each name
  3. All "clients" will be aggregated in the application statistics