Microsoft Azure Windows Virtual Desktop (WVD) Session Recording


Ekran System® enables you to organize session recording and provides granular visibility into Windows Virtual Desktops on Microsoft Azure. Advanced real-time insider threat detection alerts you to early warning signs and enables fast incident response times, making Ekran System an efficient insider threat management and compliance solution.


Ekran System is an official Microsoft Windows Virtual Desktop value-add partner.

Full agent-based deployment scheme






VDI visibility


Ekran System Workstation Client can be installed on any live virtual desktop and included in master images to be preinstalled on any new virtual desktop.


The software records on-screen activity in virtual desktops while collecting a wide range of context-rich metadata including application names, active window titles, visited URLs, and keystrokes.



Real-time alerts and incident response


To help you respond to incidents in a timely fashion, Ekran System provides a broad set of out-of-the-box alert templates along with the possibility to customize them and build your own rules.


When a user performs an abnormal or security-critical action, your team will be notified and provided with incident context so you can check what’s going on and respond immediately. For the most critical cases, alerts can be augmented with automated incident response actions such as blocking the user, killing the application, and/or displaying a warning message to the user.


Incident replays


When auditing or investigating an incident, you’ll have access to in-session and cross-session search options, fast-forward replays, and various standard and customizable reports to flag potential incidents.


Deployment scheme for Azure

Full agent-based deployment scheme

You can achieve maximum visibility and control over any activity performed within your infrastructure by installing Ekran System Client on each endpoint. Ekran Client software monitors user activity and prevents malicious actions on virtual machines. Monitoring data is sent to the Ekran System Application Server for storage and analysis, and all data is encrypted with military-grade AES 256-bit encryption.


Ekran integrates with your infrastructure, including with Azure Active Directory and Azure Sentinel.

Benefits of using Ekran System for monitoring Windows Virtual Desktop


Virtualization-ready agents

Virtualization-ready agents – The Ekran System Workstation Client can be included in a master image to automatically monitor any new virtual desktop.


Low total cost of ownership

Low total cost of ownership – Floating endpoint licensing enables license reassignment in a couple of clicks. For virtual environments, this process is automated to enhance your organization’s agility.




Enterprise-ready – Ekran is easy to implement even with large deployments due to its high availability and multi-tenancy. Ekran provides enterprise-oriented features such as system resource and health monitoring dashboards and scheduling of automated maintenance tasks.


Major user-based risk management controls in one platform.

Major user-based risk management controls in one platform – Ekran System delivers identity and access management, session recording and activity audits, and incident response functionality to detect and prevent insider threats in accordance with NIST 800-53 and most IT security standards.