Privileged Session Monitoring
Record and review privileged sessions to establish what happened during elevated access.
Overview
When shared accounts or remote administration are in use, it can be difficult to establish who made a change or what happened during a privileged session. Gaps in session evidence can also slow investigation of a service issue or security event, particularly when records are hard to find or review consistently.
Privileged Session Monitoring addresses the observation, recording, storage and review of elevated interactive sessions. Privileged remote and local activity can generate records that authorised staff can locate and examine, rather than relying on administrator recollection or assembling details from separate sources. Session evidence is retained and handled according to defined requirements, giving significant administrative activity useful context.
What this solution helps you achieve
Accessible session evidence
Authorised staff can locate and examine retained privileged session records.
Traceable privileged activity
Administrative activity is linked to named individuals and can be reviewed after use.
Defined session retention
Privileged session evidence is retained and handled according to defined requirements.
Products for this solution
Explore options for this solution. The right choice depends on your environment, requirements and existing tools. We can help you assess which products fit and where they complement one another.
