Centrify records all privileged user activity including screen actions, events, and metadata, and delivers a comprehensive picture of intentions and impacts. Its unique, searchable playback feature gives IT security managers and auditors the ability to see exactly what users did and the results of their actions. Session playback identifies privilege abuse or the source of a security incident.
Centrify’s session playback is externalized to Splunk with Centrify’s Session Recording and Monitoring. You can now playback the session video from the Centrify Audit event as shown in the following example: