The Kryon Process Discovery database contains several tables. This topic is about the PD_RAW_DATA table. This table contains all recorded data. The screen images are encrypted, but the recorded meta data can be used for reporting.

You can export this table with your query tool of choice, for example HEIDISQL. Export the PD_RAW_DATA table from MySQL or MariaDB to Excel.

Some data is using key values. Find below a list of the most common corresponding values.

Most common event type value. See column “EventType”:

15          Mouse right click

14          Mouse left click

13          Mouse wheel

6             Keyboard action

4             Mouse doubleclick

Most common Keystroke values. See column “Keystokes” (When EventType is 6 ):

1             Single key: User pressed a single key

3             Key combo: User pressed multiple keys

5             ASCII Group: Combination of keys (see “Combinations”)

8             Move group: user pressed keys which advance the process (see some specific keys in “Combinations”)

Combinations column (When EventType is 6 and Keystroke is 5 or 8)

Here you could see many values. These are so called “windows.forms.keys”. See:

https://docs.microsoft.com/en-us/dotnet/api/system.windows.forms.keys?view=netframework-4.8

Some samples:

13          Enter/Return

96          Numeric value

36          Home button

32          Space

65-90    a-z

40          Down arrow

39         Right arrow

38          Up arrow

37          Left arrow

162        Left-CTRL

160        Left-Shift

33          pgUp

36          home

If a user pressed for example the keys “6789”, then you will see something like “Combinations:t 96],w96],<96],296]].” The only recorded keystrokes are keystrokes which are important for the process. No full text user input is saved. Just like above.