About the Client
The client owns and operates a privileged access manager that allows companies to restrict access to data via an existing Active Directory environment. The access manager enables companies to isolate confidential information to reduce the risk of being stolen and increase control and awareness companies have over their environments.
Since third-party vendors use the client’s product to access a company’s infrastructure remotely, there needs to be some record of the vendor’s actions. Thus, it would be beneficial for resolving any disputes between the vendor and the contracting company since it would be straightforward to identify points of failure. To create such a feature, the client approached Softwarium with the task of creating this functionality.
Keystroke Recording Solution
Softwarium created a browser session that uses an intermediary protocol to connect with the RDP server. This text-based protocol uses HTTP or WebSockets as a transport mechanism. We also created an interceptor class that monitors the content being transmitted on that protocol. All of the drawing instructions are saved in an encrypted file, and when the user needs to access the recording, we convert these drawing instructions into video. Keystrokes and clipboards are saved via the same method, the only difference being that instead of a file, we save it in a database that keeps track of the time when the keys were pressed.
We also have a jump to the recording function; this is when we open the built-in player (which plays drawing instructions and not video) and rewind the recording when a certain text was entered, or an operation was performed with the clipboard.
Results Delivered for the Client
Thanks to all of the work performed by Softwarium, the client was able to expand their service offering and make their product more competitive. The client’s customers were now more comfortable using the product and could better control any actions performed by their vendors. Also, the new features facilitated conflict resolution since it was now easy to prove who performed which actions and the exact time.