Proofpoint | ObserveIT On-Premises Insider Threat Management

Application Recording Policy

Application Recording Policy defines how ObserveIT records applications when monitoring endpoints. The list of applications is dynamically generated when a user loads an application for the first time and it is registered in the applications list.

Configuring an Application Recording Policy

1. In the Configuration > Endpoint Management > Recording Policies page, click Create or select a server policy template (Windows or Mac-based policy).

   The Recording Policies page displays. Scroll down to the Application Recording Policy section.

   

2. Select an Application Recording policy:

   • Recording Video and Metadata for All Applications: Record all the applications that are used by users logged on to a monitored computer. (Default policy) (Windows and Mac-based policies)
   • Recording Video and Metadata for Defined Applications: Configure a recording policy that specifies which applications to include and excludes all others from being recorded. (Windows and Mac-based policies)
   • Recording Metadata-only for All Applications: Configure a recording policy to record just metadata for applications. (Windows and Mac-based policies)
   • Using Activity Replay: Configure a recording policy that specifies when to start/stop recording before and after an Alert is triggered. (Windows-based policies only)