Keystroke Logging
Keystroke Logging is the capture of command or keyboard input during a sensitive session for audit and forensic purposes.
- Synonym
- Command Logging
Definition
Keystroke Logging is a PAM monitoring capability that records command-level or input-level activity performed during privileged sessions. It gives organizations more granular visibility than simple login logs by showing what the operator actually typed or executed.
Why it matters
Keystroke Logging provides granular evidence of what was actually done during privileged sessions.
The Ariovis perspective
Session recording can be useful, but it does not replace account governance, least privilege and clear operational responsibility. Traceability must cover the full privileged access lifecycle.
Related services
Common pitfalls
- A common pitfall is capturing keystrokes without proper data protection and access controls on the logs themselves.
Related terms
Explore this category
These concepts matter most inside a real project.
The first conversation helps establish your context, the systems involved and the next useful decision.