 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
 |
| Ekran System Forensic Monitoring Tool
| |
|
|
 |
|
 |
 |
MONITOR, DETECT, AND ANALYZE
USER-BASED THREATS
Growing
vulnerability to insider threats 
The amount of user-based
attacks on corporate data and the resultant losses to affected businesses is
continually growing since 2014. The negative effect on the victims makes recovery difficult and the impact long-lasting.
The insider threat landscape is becoming more difficult and the focus of
security monitoring is moving beyond employees and privileged IT staff. Now it
is also necessary to audit business partners, suppliers, contractors with escalated
access rights, and third-party service providers with admin privileges.
Solution
Ekran System is a modern software-based solution for corporate security
monitoring that allows to record and analyze everything that
takes place on all user screens: terminals, local PCs, and virtual machines. Linux, Windows, and Citrix platforms
are supported.
With Ekran System you will be
aware of any activity on the server, from configuration changes to any other
user and system management actions, giving you all the data necessary to explore any incident. Searchable video
records of all user actions, real-time alerts on target events, easy-to-analyze
monitoring results, and advanced generated reports help companies protect
themselves from insider threat, prevent internal data misuse, competitor
contacts, data and infrastructure corruption, fraud issues, and also comply
with HIPAA, PCI, SOX, DPD regulations.
How it works
Being installed on server or workstation, Ekran Client records video of all logged in user sessions and
accompanying metadata like active application name, currently opened window
title, URL address, keystrokes, entered command, etc. Ekran provides
full-functional playback for all session records as well as easy search by
metadata keywords everything via Web-based panel. Real-time alerts with direct link to the corresponding record and USB blocking make control even more
proactive.
Best Affordability
Ekran System is licensed only by the number of Ekran Clients end-points to be
monitored. All Management components, including Server and Management Tool, are
provided for free with any deployment. The solution supports both commercial
database MSSQL and free embedded
database Firebird to store monitoring results, so you can save even more
costs at your deployment.
DISCOVER, INVESTIGATE, AND PREVENT ALL POSSIBLE VIOLATIONS
Monitor
user activity create searchable video logs of all their actions
With Ekran System, you can control the work of your corporate
network users, including system administrators and other privileged users, and
always be sure about all their actions. Ekran System creates the complete video records of all local,
remote, and terminal sessions. With Ekran System, nothing can hide: its
screen recording system is universal, because every user action performed is
displayed on the screen, and thus will be captured. The product works for any
network protocol, application, even for all types of architecture (AD or non-AD
users). Ekran System supports Citrix,
Terminal Services, VNC, Remote Desktop access, and more configurations.
Analyze monitoring results discover suspicious
user behavior
Ekran System
records all user sessions, including the privileged ones, and its practically
impossible to avoid. Each video record is
supplemented with text metadata like active application
name, currently opened window title, URL address, keystrokes, etc. Keyword-based search gives you an
effective tool to perform retrospective user action analysis and incident
investigation. Alert feature makes
security system more proactive: it allows to quickly respond to suspicious events
and user actions. You can also connect to any "live" session and see what is going on in real time.
Examine malicious activity restore the chain of events
When you suspect
there has been a breach of corporate
security, it can often be difficult to figure out what really happened, who
was involved, what actions were performed, and the scope of the problem. Ekran
System will provide you with complete, detailed information about everything
that took place on each computer and terminal server in your organization. Using
the records of all the involved machines, you can reconstruct a precise picture of the incident and get accurate
facts needed to guide any decisions. The ability to export video episodes into forensic format will allow you to share
video evidence with any appropriate party, like law enforcement, legal counsel,
present it to managers or executives during an internal meeting.
Get more information
|
 |
|
 |
|
 |