What Session Recording Actually Captures
Video, text and structured commands are three different capabilities with different costs and different usefulness. Which one answers which question.
Explainer
Recording is workplace monitoring with obligations attached, and it is evidentiary rather than preventive. Both are stated plainly here, because deployments that overstate it fail at the first incident.
7 notes
Video, text and structured commands are three different capabilities with different costs and different usefulness. Which one answers which question.
Explainer
Proxy, agent and target-side capture have different coverage, different failure modes and different amounts of trust in the recorded system.
Reference
Session recording is workplace monitoring, with obligations attached in most jurisdictions. What to settle before deployment rather than after.
Analysis
Recording produces data quickly and answers questions rarely. Setting a retention period you can justify, and keeping the cost proportionate.
Procedure
Nobody watches the recordings. A sampling and alerting model that produces findings, rather than a control that exists only on paper.
Procedure
Blocking a command as it is typed sounds better than reviewing it afterwards. Where it works, where it causes outages, and how to introduce it safely.
Analysis
Questions routinely asked of session recordings that they cannot answer, and what to use instead for each.
Reference