Need to track who's using the platform, what they're doing, and how they're progressing? These four Data Explorer reports give you detailed user and activity data you can export as CSV files.
You'll find these reports under Reports > Data Explorer in the main navigation menu.
Which report should I use?
Each report answers different questions:
- User List – Who's licensed? When did they last log in? What's their total activity?
- User Activity – What did users do during a specific time period?
- Usage Metrics – How many new users are onboarding vs how many existing users are active?
- Lab Activity – Which labs are users completing? By what category, difficulty, or collection?
User List
Get a complete snapshot of all licensed users with lifetime activity metrics.
What's in this report
The User List includes:
- Full list of licensed users
- Days since last activity
- All-time points achieved
- Total CPE (Continuing Professional Education) points
- License status and type
- Team assignments
When to use User List
Use this report to:
- Audit who has access to the platform
- Identify inactive users
- Track lifetime engagement
- See total CPE earned by user
- Export user data for HR or compliance needs
How to download User List
- Go to Reports > Data Explorer
- Find the User List section
- Click Explore Data
- Select your filters and columns
- Click Download CSV
Available columns
| Column | What it shows |
|---|---|
| User_ID | Unique identifier for each user |
| The email address associated with the user’s platform account | |
| Full_Name | The user’s first and last name |
| User_Status | The user’s platform account status (e.g. Pre-registered, Invited, Active, Deactivated) |
| Team | Team name the user belongs to |
| Teams | A list of all teams and their hierarchical relationship that the user belongs to |
| Roles | A list of all platform permission roles assigned to the user |
| SAML_UID | The unique SAML identifier associated with the user’s account |
| Role_Name | The primary platform permission role assigned to the user |
| Days_Since_Last_Login | The number of days elapsed since the user’s most recent login |
| Days_Since_Last_Lab_Completion | The number of days elapsed since the user’s most recent lab completion |
| Days_Since_Last_Lab_Attempt | The number of days elapsed since the user’s most recent lab attempt |
| Lab_Completions | The total count of labs successfully completed by the user |
| Assigned_Collections | The total number of labs collections assigned to the user |
| Assigned_Collections_Completed | The total number of assigned lab collections successfully completed by the user |
| Points | The total number of points earned by the user for first time lab completions |
| Avg_Lab_Accuracy | The average accuracy of the user’s lab question attempts, calculated across all attempts |
| Avg_Mins_Per_Visit | The average time, in minutes, the user spends completing labs per visit |
| Last_Login_Date | The date of the user’s most recent login |
| CPE_Points | The total Continuing Professional Education (CPE) points earned by the user for first time lab completions. |
Available Filters
| Filter | Description |
| Team Name | Filter to users belonging to the selected team(s). |
| License Type | Filter to users with the selected product license(s) (e.g., Immersive Labs, Application Security, Crisis Simulations, Workforce Exercises). |
| User | Filter to specific user(s) by name or email. |
| User Status | Filter to users with the selected account status (Pre-registered, Invited, Active, Deactivated). |
User Activity
Track what users did during a specific time period with time-based metrics and aggregations.
What's in this report
User Activity includes:
- Labs completed by month, week, or custom period
- Crisis exercises completed by team
- Specific activity over chosen date ranges
- Activity broken down by user or team
- Time spent on platform
When to use User Activity
Use this report to:
- Track engagement over time
- Compare activity between months
- See which teams completed specific exercises
- Monitor adoption after new content launches
- Report on activity for specific time periods
How to download User Activity
- Go to Reports > Data Explorer
- Find the User Activity section
- Click Explore Data
- Set your date range (this one's time-sensitive)
- Select your filters and columns
- Click Download CSV
Available columns
| Column | What it shows |
|---|---|
| User_ID | Unique identifier for each user |
| The email address associated with the user’s platform account | |
| Full_Name | User’s first and last name |
| User_Status | The user’s platform account status (e.g. Pre-registered, Invited, Active, Deactivated) |
| Team | The primary team the user belongs to |
| Teams | A list of all teams and their hierarchical relationship that the user belongs to |
| Roles | A list of all platform permission roles assigned to the user |
| Products | A list of all available products the user has access to via their licence (e.g. immersive labs) |
| Date | The specific date for aggregated user activity within the selected period |
| Week_Commencing | The starting date of the week used for aggregating measures within the given period |
| Month_Commencing | The starting date of the month used for aggregating measures within the given period |
| Lab_Points_By_Date | The sum of all lab points accumulated by the user within the given period |
| Count_Collections_Assigned_To_Others | The total number of lab assignments created and assigned by the user to others within the given period |
| Count_Collection_Labs_Assigned | The total number of lab assignments assigned to the user within the given period |
| Count_Collection_Labs_Completed | The total number of lab assignments completed by the user within the given period |
| Count_Lab_Attempts | The total number of lab attempts by the user within a given period |
| Count_Lab_Completions | The total number of lab completions by the user within a given period |
| Count_Crisis_Sim_Started | The number of Crisis Simulations started by the user within a given period |
| Count_Crisis_Sim_Assigned | The number of Crisis Simulations assigned to the user within a given period |
| Count_Logins | The total number of logins by the user within the given period |
| Count_Crisis_Sim_Completed | The number of Crisis Simulations completed by the user within a given period |
| CPE_Points_By_Date | The sum of all Continuing Professional Education (CPE) points accumulated by the user within the given period |
| SAML_UID | The unique SAML identifier associated with the user’s account |
| Highest_Difficulty_Number_Ever_Achieved | The highest lab difficulty level completed by the user across all time, ranging from 1 to 9 |
| Highest_Difficulty_Level_Ever_Achieved_By_User | The highest lab difficulty band (Beginner, Intermediate, Advanced) completed by the user across all time |
| Role_Name | The primary platform permission role assigned to the user |
Available Filters
| Filter | Description |
| Team Name | Filter to users belonging to the selected team(s). |
| License Type | Filter to users with the selected product license(s) (e.g., Immersive Labs, Application Security, Crisis Simulations, Workforce Exercises). |
| User | Filter to specific user(s) by name or email. |
| User Role | Filter to users with the selected platform permission role(s). |
| Date Range | Restrict results to a preset window (Last 7 days, 2/4/6 weeks, 3/6/12 months, Custom Date - Today, Custom Range). Defaults to Last 4 weeks. |
| User Status | Filter to users with the selected account status (Pre-registered, Invited, Active, Deactivated). |
| Currently Licensed Users | Checkbox to restrict results to users who currently hold a license. |
Usage Metrics
Separate new user onboarding from existing user activity to understand adoption patterns.
What's in this report
Usage Metrics splits activity into three types:
- New users – First-time platform access
- First activity – Users doing their very first lab or exercise
- Repeat activity – Ongoing engagement from existing users
This helps you see the difference between onboarding activity and regular usage.
When to use Usage Metrics
Use this report to:
- Track onboarding success
- Separate new user activity from established user activity
- Understand if growth is from new users or increased engagement
- Measure retention (are users coming back after first activity?)
- Report on adoption metrics
How to download Usage Metrics
- Go to Reports > Data Explorer
- Find the Usage Metrics section
- Click Explore Data
- Choose your date range
- Select your filters and columns
- Click Download CSV
Available columns
| Column | What it shows |
|---|---|
| User_id | Unique identifier for each user |
| The email address associated with the user’s platform account | |
| Full_Name | User’s first and last name |
| User_Status | The user’s platform account status (e.g. Pre-registered, Invited, Active, Deactivated) |
| Team | The primary team the user belongs to |
| Teams | A list of all teams and their hierarchical relationship that the user belongs to |
| Roles | A list of all platform permission roles assigned to the user |
| Date | The specific date for aggregated user activity within the selected period |
| Week_Commencing | The starting date of the week used for aggregating measures within the given period |
| Month_Commencing | The starting date of the month used for aggregating measures within the given period |
| First_Login | The date of the user’s initial login |
| First_Lab_Completion | The date the user first completed a lab |
| First_Lab_Attempt | The date the user first attempted a lab |
| Count_New_Users_Logged_In | The number of users who logged in for the first time during the given period |
| Count_New_Users_Lab_Completion | The number of users who completed their first lab during the given period |
| Count_New_Users_Lab_Attempt | The number of users who attempted their first lab during the given period |
| Count_Users_Logged_In | The distinct count of users who logged in during the given period |
| Count_Users_Lab_Completion | The distinct count of users who completed at least one lab during the given period |
| Count_Users_Lab_Attempt | The distinct count of users who attempted at least one lab during the given period |
| Count_Users_Repeat_Logged_In | The count of users who logged in within the selected period who have also logged in before the selected time period |
| Count_Users_Repeat_Lab_Completion | The count of users who completed a lab within the selected period who have also completed a lab before the selected time period |
| Count_Users_Repeat_Lab_Attempt | The count of users who attempted a lab within the selected period who have also completed a lab before the selected time period |
| Count_Users_Licensed | The total count of users with an assigned license |
| SAML_UID | The unique SAML identifier associated with the user’s account |
| Role_Name | The primary platform permission role assigned to the user |
Available Filters
| Filter | Description |
| Column Picker | Select which columns to include in the results. |
| Team Name | Filter to users belonging to the selected team(s). |
| License type | Filter to users with the selected product license(s) (e.g., Immersive Labs, Application Security, Crisis Simulations, Workforce Exercises). |
| User | Filter to specific user(s) by name or email. |
| User Role | Filter to users with the selected platform permission role(s). |
| Date Range | Restrict results to a preset window (Last 7 days, 2/4/6 weeks, 3/6/12 months, Custom Date - Today, Custom Range). Defaults to Last 4 weeks. |
| User Status | Filter to users with the selected account status (Pre-registered, Invited, Active, Deactivated). |
| Currently Licensed Users | Checkbox to restrict results to users who currently hold a license. |
Lab Activity
Track individual lab completions with detailed metrics about which labs users are completing.
What's in this report
Lab Activity includes:
- Every individual lab completion
- Lab details (category, difficulty, collection)
- MITRE ATT&CK technique mapping
- Career path association
- Completion data (time, accuracy, attempts)
When to use Lab Activity
Use this report to:
- See which labs are most popular
- Track completions by MITRE ATT&CK technique
- Analyze difficulty levels completed
- Monitor collection or career path progress
- Understand time to completion
- Track accuracy scores
How to download Lab Activity
- Go to Reports > Data Explorer
- Find the Lab Activity section
- Click Explore Data
- Set your filters (this report can be large – filter by date or team)
- Select your columns
- Click Download CSV
Available columns
| Column | What it shows |
|---|---|
| User_ID | Unique identifier for each user |
| The email address associated with the user’s platform account | |
| Full_Name | User's first and last name |
| User_Status | The user’s platform account status (e.g. Pre-registered, Invited, Active, Deactivated) |
| Team | The primary team the user belongs to |
| Teams | A list of all teams and their hierarchical relationship that the user belongs to |
| Roles | A list of all platform permission roles assigned to the user |
| Products | A list of all available products the user has access to via their license (e.g. Immersive Labs, Immersive Labs Application Security, Immersive Crisis Simulations, Immersive Workforce Exercises) |
| Lab_Title | The title of the lab |
| Categories | The categories the lab falls under (e.g. Defensive Cyber, Application Security etc) |
| Sub_Categories | The sub-categories the lab falls under from their parent category (e.g. Tools (Defensive), Secure Coding, AWS, CVEs) |
| Collection | A list of collections that include the given lab |
| Career_Paths | A list of career paths that include the given lab |
| MITRE_Techniques | The names of the parent MITRE techniques |
| MITRE_Sub-Techniques | The names of the parent MITRE sub-techniques |
| MITRE_Tactics | The names of the MITRE tactics |
| NICE_K_Numbers | A list of the NICE K numbers associated with the lab |
| Difficulty | The difficulty level of the lab, ranging from 1 to 9 |
| Difficulty_Band | The difficulty band of the lab (Beginner, Intermediate, Advanced |
| Points_From_lab | The total points earned from the lab |
| Lab_Accuracy | The aggregated average accuracy of lab question attempts, calculated across all attempts |
| Active_Minutes_In_Lab | The total time, in minutes, labs are open in the user’s web browser, using estimated time when available |
| Avg_Minutes_In_Lab | The average time, in minutes, labs are open in the user’s web browser, using estimated time when available |
| Estimated_Minutes | The estimated time to complete the lab |
| Attempt_Started_At | The date and time a lab attempt was started |
| Attempt_Completed_At | The date and time a lab attempt was completed |
| Is_Attempt_Completed | A boolean indicating whether a lab attempt was completed |
| CPE_Points_Earned | The total Continuing Professional Education (CPE) points earned for first-time lab completions |
| SAML_UID | The unique SAML identifier associated with the user's account |
| Count_Lab_Attempts | The total number of lab attempts |
| Count_Lab_Completions | The total number of lab completions by the user within the given period |
| Count_Unique_Labs_Attempted | The count of distinct labs attempted |
| Count_Unique_Labs_Completed | The count of distinct labs completed |
| Count_Users_Attempting | The count of distinct users who attempted the labs |
| Count_Users_Completing | The count of distinct users who completed at least one lab |
| Per_Attempts_Completed | The percentage of lab attempts that were completed |
| Role_Name | The primary platform permission role assigned to the user |
Available Filters
| Filter | Description |
| Column Picker | Select which columns to include in the results. |
| Team Name | Filter to users belonging to the selected team(s). |
| License Type | Filter to users with the selected product license(s) (e.g., Immersive Labs, Application Security, Crisis Simulations, Workforce Exercises). |
| Collection Name | Filter to labs that belong to the selected collection(s). |
| Career Path Name | Filter to labs that belong to the selected career path(s). |
| User | Filter to specific user(s) by name or email. |
| User Role | Filter to users with the selected platform permission role(s). |
| Date Range | Restrict results to a preset window (Last 7 days, 2/4/6 weeks, 3/6/12 months, Custom Date - Today, Custom Range). Defaults to Last 4 weeks. |
| Lab Title | Filter to specific lab(s) by title. |
| User Status | Filter to users with the selected account status (Pre-registered, Invited, Active, Deactivated). |
| Currently Licensed Users | Checkbox to restrict results to users who currently hold a license. |
Common use cases
Track team engagement
Goal: See which teams are most active
How:
- Open User Activity Explore
- Filter by date range (e.g., last 30 days)
- Include columns: Team, Count_Lab_Completions, Count_Logins
Identify inactive users
Goal: Find users who haven't logged in recently
How:
- Open User List Explore
- Sort by Days_Since_Last_Login
- Reach out for re-engagement
Analyze lab popularity
Goal: See which labs users complete most
How:
- Open Lab Activity Explore
- Select date range i.e. last 4 weeks
- Include columns Lab_Title, Count_Lab_Completions
- Sort by Count_Lab_Completions
Track MITRE coverage
Goal: See which MITRE techniques your team has covered
How:
- OpenLab Activity Explore
- Include columns: Team, MITRE_Techniques, Mitre_Tactics, Mitre_Sub_Techniques Attempt_Completed_At
- Filter to specific team
- Create list of unique MITRE techniques completed
Complete user audit
Get the full picture of any user:
- User List – Check license status and lifetime activity
- User Activity – See recent activity breakdown
- Lab Activity – Drill into specific labs completed
Team performance review
Track a team's progress:
- Usage Metrics – See new users vs repeat activity
- User Activity – Check overall team engagement
- Lab Activity – Analyze which labs and techniques covered
Onboarding analysis
Measure new user success:
- Usage Metrics – Identify new users
- User Activity – Track their first 30 days
- Lab Activity – See which labs they complete first
Tips for working with these reports
Keep exports manageable
Lab Activity can get large. Always filter by:
- Date range, default range is last 4 weeks (Last 7 days, Last 2 weeks, Last 6 weeks, Last 3 months, Last 6 months, Last 12 months)
- Specific teams
- Specific collections or career paths
Save your configurations
If you run the same reports regularly, save your filter and column selections. (See Data Explorer: Complete Guide for how to save configurations.)
Combine with pre-built dashboards
These exports are raw data. For quick insights, check pre-built dashboards first:
- Platform Activity Reports – Summary metrics
- Capability by Area Reports – Skill gap analysis
- Metrics Tracker – Benchmark comparisons
Use Data Explorer when you need to:
- Drill deeper than dashboard views
- Export for external analysis
- Answer custom questions
- Build pivot tables
Next steps
- Read Data Explorer: Exercise Reports for Crisis Sim, Workforce, Cyber Range, and Collections data
- See Data Explorer: Complete Guide for how to save report configurations
- Check Platform Activity Reports for pre-built engagement dashboards