Reach any machine
Remote access
Authorized interactive sessions — live screen view and control, keyboard/mouse and two-way audio, plus terminals — created by a named operator, with a visible local indicator on the endpoint, an immediate local disconnect, and a full audit trail. It exists to let operators actually fix a machine, not just watch it, while keeping consent and accountability non-negotiable: there is no hidden-session mode. For the tenant it means hands-on support with their consent preserved and every action recorded.
- Open terminal
- The "Open terminal" button (top right) starts an interactive shell session on a chosen endpoint — a full xterm.js window with Ctrl-C, a control-key sender, detach-to-its-own-window and End session; several can run at once.
- Summary & session tables
- Three counters (Active or pending, Unattended-enabled, Recent sessions) head the view. An "Active & pending" table lists sessions in progress or awaiting consent, and a "Recent sessions" table shows the last 25; both show Endpoint, Status, Mode, Operator, Reason, Consent and Requested time.
- Consent & unattended
- A session requires explicit local consent unless the device is enrolled for unattended access (the right setting for a headless server). The endpoint always retains a local disconnect and shows the indicator throughout. If a session is denied because unattended access is off, an "Enable unattended access" button is offered inline (confirmation required).
- Live view & control
- An active session has a Live view / "Full screen & control" button (and an inline live-screen preview). Inside, Take control drives mouse and keyboard, Hold to talk sends your voice to the endpoint, and Listen plays the endpoint microphone — all under the same consent, indicator and audit. End closes a session (active or pending) at any time. Keyboard and mouse control exist only inside the active session; no keystroke history is retained.
- Sizing the live screen
- Expand fills the browser window, ⛶ goes full screen, and the bottom-right corner drags to any size. Zoom (− + Fit, or Ctrl/Shift+wheel) magnifies the picture you already have; the resolution selector changes what the endpoint actually captures — raise it for fine text, lower it on a slow link. A monitor selector picks which display to view, and "☀ Wake screen" wakes a black/locked display.
Connections
The live agent connections calling home — which device identity maps to which management session, over what transport, from what source, and when it was last heard from. It exists as the low-level connectivity view behind the fleet: a device that stops appearing here has gone offline. For the tenant it is the plumbing-level proof that their endpoints are connected and reachable.
- Agent sessions
- One row per connected agent, showing the endpoint, session status, transport (the agent’s long-poll/outbound channel), agent version, source IP, last heartbeat and when it connected. The source address is recorded for troubleshooting only — devices are addressed by device ID, not by IP.
- Open a device
- Click any row to jump to that device in the Devices view and open its drawer. When nothing is listed, no enrolled endpoint has called home yet.
Session Recordings
A compliance log of recorded remote sessions. Why it is here: a recorded remote session is sensitive, so SentinelOps keeps the audit trail of who recorded what — but the video itself lives on the operator’s machine or your configured cloud, never on this server. Tenant benefit: a customer gets a defensible record of every recorded session on their devices without the footage ever being centralised where it could leak.
- What the log shows
- Each row lists the device, operator, start time, length, file size and where the media is stored (“operator machine” or an “in cloud” link). A session still in progress shows a “recording…” pill. The log is scoped to the organization in context.
- Where the video lives
- The recording is saved to the operator’s machine or your cloud, so this server holds only the metadata. If a cloud URL is present you can open the media from the Location column.
- Start a recording
- Recordings are begun with the ⏺ Record control on a live remote session — there is no start button here. This view is purely for reviewing the resulting log.
- Deleting a log entry
- The ✕ removes only this audit record; it does not touch the actual video file on the operator machine or in the cloud. You are asked to confirm because it deletes the compliance trace, not the footage.