Introduction to Session Player
You can use the Session Player to view a user's screen and audio recordings. If the user's computer is online, you can also interact with it in real-time. However, it goes beyond simple playback of screen and audio recordings, providing a suite of advanced features for real-time interaction, investigation, and auditing.
With the Session Player, you can:
Remotely control a user's computer via RDP (Remote Desktop Protocol).
Freeze a user's inputs by locking their keyboard and mouse.
Activate the Windows Security Options screen by sending the “Ctrl+Alt+Del” command.
Track user Activities and behavior rule violation Alerts.
Add Tags with notes to recordings for easier auditing and investigation.
Export images and videos for evidence gathering.
To record and view a user's desktop with the Session Player, you must enable Screen Recording in the Monitoring Profiles. This setting is on by default.
To capture and play a user's audio (both input and output), you'll need to enable Audio in the Monitoring Profiles. This setting is disabled by default.
Accessing the Session Player
Here are a few ways to launch the Session Player:
From dashboard grid widgets: Click the Movie Camera
icon, available in the grid widget(s) of most dashboards.
From a grid row: Click the Three Dots
icon at the beginning of a row in a grid widget, then select View record from the Context Menu.
From thumbnails: On screens like the Live View > Snapshots dashboard, you can click on any thumbnail to launch the Session Player.
From Employee's or Computer's Details: On the Employee's details or Computer's details details screen, click the Live View button.
Session Player Modes
The Session Player offers two distinct viewing modes: Live View and History View.
Live View
With the Live View mode, the Session Player turns into a fully functional remote desktop client. You can view a real-time stream of the user’s desktop and take remote control of it.
Here are the player controls available in the Live View mode:
1. Activate Live View: Click the Live button near the top-right corner to enable the Live View mode. You can also enable Live View by selecting it from the Calendar drop-down menu on the left side of the Session Player window. When the player is in Live View mode, the Live button will turn orange, an orange border will appear around the video, and the pay head will also turn orange.
The Live View mode is only available when the user is online.
2. Deactivate Live View/Switch to History View: There are several ways you can exit the Live View mode (and switch to the History View mode): selecting a date from the Calendar menu, moving the Play Head
or setting a new Date/Time (bottom-right corner).
3. Play/Pause Video: Click the Play / Pause
button to play or pause the video.
4. Send Ctrl+Alt+Del: Click the Exclamation icon to send the CTRL+ALT+DEL command to the user’s computer. This will bring up the Security Options screen, where you can access options to change the account password, switch a user, open the Task Manager, etc.
5. Freeze Input: Click the Lock icon to freeze/unfreeze the user’s input. When input is frozen, the user won’t be able to use their keyboard or mouse.
You can send a message to the user when this command is activated by configuring it from the Message to display section in Screen Recoding monitoring settings.
6. Take Remote Control: Click the Cursor icon to take remote control of the user's computer.
|
7. Toggle Sound: Click the Speaker icon to toggle the audio.
Note that the Audio option must be enabled from the monitoring profile for audio to be recorded.
8. Zoom In/Out: Click the Fit/Zoom drop-down menu to change the zoom level of the video.
9. View Log of Events: Click the Alert icon to open the Log of Events panel.
10. Export Video: Click the Export icon to export the video.
History View
In the History View mode, you will be able to see previous session recordings of a user.
To view a past recording, it must be within your retention period.
|
Here are the player controls available in the History View mode:
1. Select Date: Click the Calendar drop-down menu on the left side of the Session Player to select a date to view the recording for the date.
2. Select Computer: If the user has more than one computer, click the Computer Name (e.g., “win-035khor8tek” in the screenshot above) to select another computer from the list.
3. Zoom In/Out: Click the Fit/Zoom drop-down menu to change the zoom level of the video.
4. Switch to Live View: Click the Live button near the top-right corner to enable the Live View mode.
5. View Log of Events: Click the Alert icon to open the Log of Events panel.
6. Export Video: Click the Export icon to export the video.
7. Set Playback Speed: Use the Rewind and Fast Forward
buttons to slow down or speed up the playback. Click Reset speed to reset the speed to normal (1x).
8. Toggle Sound: Click the Speaker icon to toggle the audio.
9. Play/Pause Video: Click the Play / Pause
button to play or pause the video. When the video is paused, you can quickly rewind or forward the video by clicking -10 s and + 10s.
10. Navigate Timeline: Drag the Play Head on the Timeline to go back and forth through the video.
Darker areas on the Timeline indicate that no recording is available for that period. This can happen for several reasons, such as the Agent was disabled, the user logged out, Screen Recording was turned off, etc., or other issues. For troubleshooting, please refer to this Knowledge Base article on video recording issues.
11. Set Date/Time: You can set a new Date/Time from the bottom-right corner.
Changing the Zoom Level
Click the Fit/Zoom drop-down menu to top (next to the Calendar ) to change the zoom level of the video. Select the Fit option from the menu to fit the video inside the window. If the video doesn’t fit in the window area, you will be able to move around the video by clicking-and-dragging anywhere on the video with your mouse. You can also use the mouse wheel and touch gestures.
Viewing Log of Events
Click the Alert icon to open the View Log of Events panel to see all app/web Activities, review Alerts triggered by your rules, and view or manage Tags.
Activities
The Activities tab shows the user’s interactions with apps and websites (like launching a program, opening a document, or visiting a website).
1. Click the Activities tab in the Log of Events panel.
2. Use the Search field to look for specific activities.
3. Click on any activity in the log to jump to the exact moment it occurred on the timeline.
Alerts
The Alerts tab shows the rule violation alerts triggered by the user.
1. Click the Alerts tab in the Log of Events panel.
2. Use the Search field to find specific alerts quickly.
3. Clicking on an alert in the log will take you to the exact moment it occurred on the timeline.
4. You can also see all unique alerts (alerts generated by separate rules) as Location icons on the timeline:
The number inside the icon shows how many times the alert was triggered. A smaller icon with no number indicates a single alert.
Hover over an icon to see a pop-up list of all individual alerts for that rule. From this list, you can click on an alert to jump to its exact moment on the timeline.
Tags
The Tags tab allows you to view and manage tags.
A tag is a specific moment in a video with a label and notes. This is a useful feature for auditing, tracking, and case management, as it lets you highlight important points in time.
1. Click the Tags tab in the Log of Events panel.
2. Use the Search field to find specific tags quickly.
3. Clicking on a tag in the log will take you to the exact moment on the timeline.
4. On the timeline, unique tags (tags occurring within a specific timeframe like a minute) are shown as Location icons:
The number inside the icon shows how many tags were added to that moment. A smaller icon with no number indicates a single tag.
Hover over an icon to see a pop-up list of all the tags for that moment. From this list, you can click on a tag to jump to its exact moment on the timeline.
5. Click the New tag button to add a new tag. The New Tag window will pop up:
a. Select or enter a Tag Name.
b. Select the Date and Time.
c. Enter your Notes.
d. Click the Submit button.
4. Click the Edit icon to edit a tag (editing a tag is similar to adding a new tag). Click the Remove
icon to remove a tag.
Exporting Videos
Click the Export icon to open the Video Export window:
1. Select a date.
2. You can choose to export the full day or a specific time.
3. Select the video speed and FPS. You can also disable the audio track from the recording.
4. Specify an email address where the video link will be sent.
Note that if the Specify a domain to allow Teramind data export option is used (Configurations > Settings > Security), then you can only send export emails within that domain. If it’s left blank, then any email addresses can be used.
5. Click the Export video button to start the export process. When the export is ready, you will get an email to the email address you specified above. The email looks like this:
Click the link in the email to download the video.
You can view a list of all the exported videos and download them from the System > Video Exports screen.
Retrieving Archived Video (Cloud)
Recordings older than ninety (90) days are automatically moved to an archive. This process is in place to optimize storage usage and minimize processing overheads.
If you attempt to play an archived recording, a notification will appear:
Once the retrieval is complete, you'll receive an email at your account's address:
Session Playback Under E2EE (On-Premises)
When End-to-End Encryption (E2EE) is enabled, the Session Player will mask the screen on both the Live View and History View modes, and you will see an "E2EE (end-to-end encryption) is enabled" message:
Enter your passphrase and press the Decrypt button to view the recording.