Live Session Response
Upon receiving an alert, the administrator can click a link to observe the suspicious user session, live, via a streaming video broadcast of the user's screen. The administrator can rewind the video to earlier in the session or immediately review the user activity logs generated by the current session (and past sessions performed by the same user).
User Messaging and Session Kill
If deemed necessary, administrators can instant-message the user via the desktop to try determine if the suspicious activity may be warranted – or even instantly shut down the user's session from within the same interface.