Recording activity-triggered computer video output

Abstract

An application that is capable of monitoring Internet or network traffic and performing recordings of computer video output based on one or more violations of network activity policies. The recording application can be installed on the computer to be recorded or another computer or server that is connected through the network to the computer to be recorded. The monitoring application contains a configuration interface that allows a user to set thresholds for certain types of network policy violations. When the one or more violations are detected, the recording application will begin recording video of the computer's video activity. The application can be configured to include settings such as the length of the recording. In a typical environment, the application is a hardware appliance that is capable of monitoring web activity and network traffic and can connect to the computer over the network in order to perform the recording.

1 . A method of recording a network access policy violation, the method comprising:
 configuring the network access policy violation by a first computer on a network;   detecting the network access policy violation by the first computer on the network; and   capturing a video output of the first computer, in response to the detecting.   
     
     
         2 . The method of  claim 1 , further comprising:
 storing on the first computer the capturedvideo output of the first computer.   
     
     
         3 . The method of  claim 1 , further comprising:
 storing on a second computer the capturedvideo output of the first computer, the second computer being operably coupled to the first computer through the network.   
     
     
         4 . The method of  claim 1 , wherein the capturing further comprises:
 capturing the video output of the first computer by a second computer, the second computer being operably coupled to the first computer through the network.   
     
     
         5 . The method of  claim 4 , wherein the second computer further comprises:
 a hardware-based web filter appliance.   
     
     
         6 . The method of  claim 1 , wherein the capturing further comprises:
 capturing the video output of the first computer by the first computer.   
     
     
         7 . The method of  claim 1 , wherein the video output of the first computer further comprises:
 a mouse movement displayed in the video output of the first computer.   
     
     
         8 . The method of  claim 1 , wherein configuring the network access policy violation further comprises:
 setting a minimum number of violations of network activity policies that must occur within a time period before the capturing is triggered to occur.   
     
     
         9 . The method of  claim 8 , wherein configuring the network access policy violation further comprises:
 setting the time period.   
     
     
         10 . A computer-accessible medium comprising:
 a detector of a network access policy violation by a first computer on a network; and   a capturer of a video output of the first computer, operably coupled to the detector.   
     
     
         11 . The computer-accessible medium of  claim 10 , wherein the medium further comprises:
 a storer on the first computer of the recording of the video output of the first computer.   
     
     
         12 . The computer-accessible medium of  claim 10 , wherein the medium further comprises:
 a storer on a second computer of the recording of the video output of the first computer, the second computer being operably coupled to the first computer through the network.   
     
     
         13 . The computer-accessible medium of  claim 10 , wherein the capturer further comprises:
 the capturer of the video output of the first computer being on a second computer, the second computer being operably coupled to the first computer through the network.   
     
     
         14 . The computer-accessible medium of  claim 13 , wherein the second computer further comprises:
 a hardware-based web filter appliance.   
     
     
         15 . The computer-accessible medium of  claim 10 , wherein the recorder further comprises:
 the capturer of the video output of the first computer being on the first computer.   
     
     
         16 . The computer-accessible medium of  claim 10 , wherein the video output of the first computer further comprises:
 mouse movement in the video output of the first computer.   
     
     
         17 . The computer-accessible medium of  claim 10 , further comprising:
 a configurer of the network access policy violation.   
     
     
         18 . The computer-accessible medium of  claim 17 , wherein configurer further comprises:
 a setter of a minimum number of violations of network activity policies that must occur within a time period before the capturer is triggered to start.   
     
     
         19 . The computer-accessible medium of  claim 18 , wherein configurer further comprises:
 a setter of the time period.   
     
     
         20 . A hardware-based web filter appliance comprising:
 a detector of a network access policy violation, the network access policy violation being associated with an IP address of a monitored computer;   a capturer of a video output of the monitored computer, operably coupled to the detector; and   a storer of the video output, the storer being operably coupled to the capturer, wherein the video output of the monitored computer further comprises mouse movement of the monitored computer.