Live Response - Admin access, email alerts, and logging
We would like the option of letting Admins to have access to the Live Response feature without having to elevate them to full-blown Super Admins. Additionally, it would be helpful if we had the option of receiving an email notification when a Live Response session has started. Currently, if we want to know about Live Response activity, we have to dig through the audit logs to see if any sessions were initiated recently. When we do find a session in the logs, we have no way of knowing what actions were taken during the session, which is a huge blind spot. Live Response is a great feature, but the issues listed above present security risks.