domains / families / security / implementing-privileged-session-monitoring

implementing-privileged-session-monitoring

separate

'Implements privileged session monitoring and recording using PAM

When to use

• Deploying or configuring session recording for all privileged access to critical servers and databases
• Meeting compliance requirements (PCI-DSS 10.2, SOX, HIPAA, ISO 27001) that mandate privileged activity monitoring
• Investigating an incident where an administrator or third-party vendor may have performed unauthorized actions
• Implementing real-time alerting for high-risk commands executed during privileged sessions
• Establishing a forensic audit trail of all administrative actions on production infrastructure

When not to use

• monitoring standard user sessions
• monitoring endpoint activity
• general user behavior monitoring

Skill page

Source