The Session Player
The Session Player is the main pane in the Session Viewer, and is located in the top left area of it. The Session Player allows the viewing of screen captures / video of user activity recorded on computers with the Syteca Client installed, or the viewing of a graphical representation of Linux terminal data recorded (i.e. the input and output as the user sees them in the terminal).
Any of these screen captures / video frames or graphical representations can be viewed individually by clicking on the required activity record in the Metadata grid (which is on the right of the Session Player), or all of the monitored data together can be viewed by playing the session.
Table of Contents
1. The Session Player Interface
The following functions are available in the Session Player:
• To play/pause the session, click the Play/Pause (
• To switch between adjacent records, click the Previous and Next (
NOTE: It should also be noted that switching between records (as displayed in the Metadata grid, which is located on the right of the Session Player), actually means switching between the screen captures, and therefore, since each record may contain multiple screen captures, these buttons will not always switch between records (in the Metadata grid) every time they are clicked (i.e. in the event that there is more than one screen capture in the record concerned). In a similar way, some records may not contain any screen captures, and will therefore be skipped.
NOTE: When video is recorded (in Full-Motion Capture mode), the above buttons instead skip backwards and forwards in the video respectively, in increments of 10 seconds.
• To switch between any linked sessions (only if the session was restarted at midnight), click the Previous Session and Next Session (
NOTE: The above option is not currently supported (when video is record) in Full-Motion Capture mode.
• To open the Session Player in Full Screen mode, double-click anywhere on the Session Player, or click the
• To enter or exit Full Screen mode, double-click anywhere on the Session Player or click the
• To change the layout displayed in the Session Viewer: Click the
NOTE: When video is recorded (in Full-Motion Capture mode), the above button instead opens the Session Player in Full Screen mode.
• To zoom into a specific place on the screen, click the Magnifying Glass (
• To move from one monitor to another in Client sessions with multiple monitors, click the Tools (
• To adjust the speed at which the session of the monitored data is playing in the Session Player, click the
NOTE: When video is recorded (in Full-Motion Capture mode), instead of the above button, the
• To block the user, click the
• To play a live session in real-time (with the Metadata grid and the Details area panes in the Session Viewer hidden), click the
NOTE: The above option is not currently supported (when video is record) in Full-Motion Capture mode.
• To get a link to a specific place in the session, click the Tools (
• To download the screen capture that is currently displayed, click the Tools (
NOTE: The above option is not currently supported (when video is record) in Full-Motion Capture mode.
• To perform a Forensic Export, click the Tools (
NOTE: The above option is currently only partially supported, where only the video (without the metadata) can be exported, and it is exported to MP4 format (instead of to EFE format used by the Syteca Forensic Player).
To select and view the required record of user activity in the session (i.e. the records displayed in the Metadata grid, which is located on the right of the Session Player), as well as by simply clicking on it, the keyboard can also be used to navigate between the records:
• To switch between adjacent records in the session, press the Up Arrow (previous record) and Down Arrow (next record) keys.
NOTE: Alternatively, the Previous and Next ( buttons in the Session Player can also be used to switch between adjacent records. It should also be noted that switching between records, actually means switching between screen captures, and therefore, since each record may contain multiple screen captures frames, these buttons will not always switch between the records (in the Metadata grid) every time they are clicked (in the event that there is more than one screen capture in the record concerned). In a similar way, some records may not contain any screen captures, and will therefore be skipped.
NOTE: When video is recorded (in Full-Motion Capture mode), the above buttons instead skip backwards and forwards in the video respectively, in increments of 10 seconds.
• To switch between adjacent records in the session that contain alert events, press the Left Arrow (previous alert record) and Right Arrow (next alert record) keys.
2. Switching Between Linked Sessions
Sessions that have restarted automatically at midnight (for Windows, macOS, and Linux remote SSH sessions only) are linked to each other in the Session Player. These adjacent sessions can therefore easily be switched between by clicking the Previous Session and Next Session () buttons.
NOTE: The above option is not currently supported (when video is record) in Full-Motion Capture mode.