Overview
Dispel uses RecordTS on VDI (Virtual Desktop) Stacks configured to record sessions. This allows admins visibility into what users are doing while accessing resources through a Dispel VDI.
Additionally, this feature allows for "over-the-shoulder" live viewing of sessions and the ability to export recordings - which can be used as training videos for internal users.
Reach out to a Dispel representative to learn about integrating this feature with your SOC/SIEM!
Pre-Requisites
In order to view recorded virtual desktop sessions, you must have:
A VDI Stack configured to record sessions
Admin login credentials
If you are missing either of these, please contact the Dispel team.
Admin Walkthrough
Accessing Recordings
On a Dispel VDI, open a web browser and navigate to the IP / port provided by the Dispel team. (ex 10.10.10.20:8084)
Log into the recording dashboard with your provided credentials.
Once logged in, navigate to the Sessions tab.
Here, you will see a list of the sessions
Hit Play to view the session
Hit Export to download the recorded session
You can click the green plus icon to view more information about a specific session including the session host ID, host machine name, recording size, etc.
Italicized recordings indicate that the session is currently live. This means you can watch a user's session in real-time rather than waiting for their session to end!
Related Resources
In addition to recorded sessions, admins can view and interact with another user's live session using Windows Virtual Desktop Remote Assistance (MSRA).
To learn more about how to use this tool on a VDI, visit the link below.