Recording SSH and Kubectl Sessions
There are times when it’s not enough to have metadata of what somebody did during a session. Finding the root cause of an issue by sorting through audit logs takes time and doesn’t guarantee you’ll figure exactly what went wrong. It’s like looking at footprints to figure out what someone did and where they went. This is where full recording of sessions becomes indispensable.
Privileged session recording means recording the user’s actual screen during their SSH (or kubectl) session for real-time or later playback. If audit logging is akin to tracking footprints to learn what someone did, session recording is like having security surveillance that you could watch live or replay later.
Analysts and research companies advise security and infrastructure leaders to deploy session recording solutions as soon as possible for the following reasons: