How to View Smart Screenshot Records on Client Endpoints

On the premise that

Smart Screenshot

is enabled, administrators can continuously view the screen trace records of the specified endpoint through Ping32. Unlike single screenshots, Smart Screenshots are more suitable for restoring employees' continuous operation trajectories within a certain period of time, so they have high practical value in audit spot checks, event review, and high-risk position supervision.

Viewing premise: the impact of Smart Screenshot saving location

Whether you can view history stably depends on where the

Smart Screenshot

is saved. When the administrator is troubleshooting "why the screenshot cannot be seen currently", the administrator should first confirm whether the screenshot is saved locally on the endpoint or on the server, and then determine whether the policy has not taken effect, the endpoint is not online, or the data itself has not been uploaded.

• If the Smart Screenshot is saved in Endpoint Computer: Only when the client is online, you can view the endpoint's Smart Screenshot records through the console.
• If the Smart Screenshot save location is server: Regardless of whether the client is online or not, you can view the Smart Screenshot record of the endpoint through the console at any time.

 

View Smart Screenshot records on the console

1. Click Data Security in the Ping32 Management Console
2. Click Screen Record
3. Double-click to select the endpoint you want to view to view the Smart Screenshot record of the endpoint.

After entering the recording interface, it is recommended to first locate the target time period based on the time range, endpoint name and business scenario, and then focus on the window changes, interface switching and key operation nodes in the screenshots. For events that require further verification, Smart Screenshots can be viewed in conjunction with

Leak Tracking

,

File Operation

and other records to improve the accuracy of analysis.

Retrieve Smart Screenshot text through Unified Search

If the Smart Screenshot strategy is turned on

Smart Analysis

:

You can use

Unified Search

to enter a keyword, and the system will display Smart Screenshot records containing the keyword.

Suggestions for use

• If the enterprise needs to view screenshots for a long time even when the endpoint is offline, it is recommended to configure the saving location of Smart Screenshot to server.
• If the administrator wants to quickly retrieve screenshot content by keywords such as name, project code, customer name, etc., they should ensure that the OCR environment has been deployed and Intelligent Analysis is enabled in the policy.
• For key positions, it is recommended to link and analyze Smart Screenshot records with behavioral records such as outgoing, printing, and screenshot auditing to avoid relying solely on a certain type of evidence to make conclusions.