Systems and methods provide for text mining, and in particular text mining of screens, of endpoint and other target computers and devices, of an enterprise or network. The text mining from the screen is based on the text that the end point user actually sees, as is actually displayed on the screen. As a result of the text mining, action can be taken against the endpoint computer.