Keystroke logging for capturing commands run by privileged users

[vivekbksingh]

Hi

Does Keystroke logging captures all keystrokes while access Privileged session or only commands ran on windows and linux command prompt?

1. Windows Privileged session - Does password entered on login screen get recorded? If we access an application via browser or an application portal i.e SAP thick client, Oracle DB Client, SQL Developer, Notepad, Windows Powershell etc,- does all keystrokes recorded while typing anything on above clients?

2. Linux - If we type a password on a Linux console, does it get recorded ?

3. Privileged access of Application console like AWS console or Azure console or any Thick client i.e SAP or ADSI - Does all the keystrokes get recorded?

Regards,
Vivek

[vikasjv]

Hi @vivekbksingh ,

By default, the standard view is configured for all applications. All keystroke commands or operations the user performs on a live session are captured and categorized as different risk activities. The risk activities are categorized as Critical, High, Medium, and Low.

1. The password entered on the login screen will not be recorded.
2. Thick client applications that get triggered outside of Saviynt. hence session recording and keystroke logging will not be applicable here.

Regards,

Vikas J V,

If this reply answers your question, please click the Accept As Solution button to help future users who may have a similar problem.

[vivekbksingh]

Hi Vikas,

Thanks for your response. It answers two of my questions but one still remaining.

If we are type any thing on command prompt (linux or windows) does it get recorded as keystrokes. Or anything only gets recorded if users click Enter after typing something.

More specifically if a user enters a password in a password prompt (either on command prompt or on an application in a windows pam session) and hit enter does password gets recorded as keystrokes?

Regards,

Vivek

[vivekbksingh]

Hi Vikas,

Is there any update on this?

Regards,

Vivek

[NageshK · Accepted solution]

@vivekbksingh When you type something and not hit enter, it does not get recorded as keystroke. However, you will still be able to see it in the video recording. 

Passwords are not captured and so there is no possibility of them showing up in keystrokes.

Have you onboarded any of your unix systems yet? If yes, you can test this to see in your env too.

Thanks,

Nagesh K