Unusual activities

Unusual activities

Know which days to review first when computer activity looks scripted, fabricated, or broken.

Computer activities

Know which days to review first with an unusual activities report

Unusual activities is a TimeCamp add-on that turns your team's computer activity into an unusual activity report, with a score from 0 to 100 for each person-day with enough activity. It is an activity anomaly report for managers who suspect scripted, fabricated, or broken tracking but cannot check every row by hand. You get a ranked list of days to review first.

Why teams use Unusual activities

  • Review the right days first. Each person-day gets a score and a risk label. The highest scores come first.
  • See why a day stands out. Each row shows its two strongest signals and their scores.
  • Check the context in one click. Select a name to open TimeCamp activity details for that person and date.
  • Scores only when there is enough data. Days with less than one hour of activity are left out. A check without enough data is listed as missing, not failed.

What you can do

  • Screen each day with 11 checks: consecutive same durations, repeated durations, uniform durations, crash or offline applications, round-number durations, repeating application sequence, long application streaks, low application diversity, no short activities, uniform activity gaps, and single-application dominance.
  • Read one of four risk bands: Low below 40, Moderate from 40, a stronger band from 60, and High from 75.
  • See how many checks had enough data, for example 10/11.
  • Filter by people, date, or risk, and sort by score.
  • Export all filtered and sorted rows to CSV, without user IDs.

How it works

  1. Open Unusual activities in TimeCamp. The report starts with the active people you can see, from two days ago through yesterday.
  2. Pick a date range and select Apply. To look at up to 20 days, first select one person in the People filter.
  3. Filter by risk to find the days to check first.
  4. Select a name to open TimeCamp activity details in a new tab, at the first hour with activity that day.

Good to know

  • Unusual activities is a screening tool, not proof of fraud. Repetitive work, automation, accessibility tools, remote desktops, app crashes, and offline tracking can also raise a score.
  • A report covers up to 2 days for all or several people, and up to 20 days for one person.
  • You see only the people you can already see in TimeCamp computer activity. If TimeCamp cannot return that list, the report shows only you.
  • Scores come only from TimeCamp computer activity. The add-on keeps no separate report database.
  • Large teams take longer to load.
  • The interface is in English.

Frequently asked questions

What does the unusual activities report in TimeCamp check?

The Unusual activities add-on runs 11 pattern checks on each person-day of computer activity, such as round-number durations and repeating application sequences. The checks with enough data combine into one score from 0 to 100.

Does a high score prove time theft?

No. A high Unusual activities score means the day matches one or more patterns, not that anyone acted with intent.

Why is a person or a day missing from the report?

Unusual activities leaves out days with less than one hour of computer activity, inactive people, and people whose last sync is older than the start of the selected period.

Does Unusual activities use screenshots?

No. Unusual activities scores only TimeCamp computer activity, such as applications and activity durations. It does not use screenshots, time-entry descriptions, tasks, attendance, or location.

Screenshots