The Session Viewer Interface


By default, the Session Viewer interface is divided into the following 3 areas:

• The Session Player (the main area of the page, located in the top left of it): Allows the viewing of the screen captures made on computers with the Windows Client or macOS Client installed, or for computers with the Linux Client installed either with monitoring of the GUI (if X Window System is enabled) or otherwise a graphical representation of the recorded Linux terminal data (i.e. the input and output as the user sees them in the terminal). The navigation buttons allow you to manage the playback of the video of screen captures or commands executed.

NOTE: If the Enable screen capture recording along with user activity recording checkbox is not selected to enable this option on the Client, the sessions of this Client will not contain any screen captures.

• [Windows Clients] The Details area (located at the bottom of the page, underneath the Session Player): Allows the viewing of the keystrokes and clipboard text data associated with the selected record, as well as USB device information and URL of the websites visited by the user, and the Alert ID (along with the Alert Name, Risk Level, What, and When).

• The Metadata grid (the area located on the right of the page): Displays the session data in the form of a grid, which includes in the corresponding columns:

- [Windows Clients and macOS Clients] Activity time, Activity title, Application name, Text data, Alert/USB rule name, and URL.

- [Linux Clients] Activity time, Command, Function, Parameters, and Alert name.