Admin Audit Logs
Audit logs for terminal connection requests by technicians should include a transcript of the commands, or at the very least create a log locally on the endpoint that can be retrieved/reviewed.
Simply knowing Technician 1 requested a terminal session does not aid in either validating or invalidating issues after a connection was made. Logging on endpoints is not always enabled, collected in a SIEM, or logs are overwritten beyond a certain size/date.
This would allow for IT teams and MSP's to ensure visibility into what commands are being run by who from the Atera platform.
3
votes
Carl Littrell
shared this idea