diff --git a/docs/docs.json b/docs/docs.json
index 6d8eb04cc..3fb6914af 100644
--- a/docs/docs.json
+++ b/docs/docs.json
@@ -784,7 +784,10 @@
"groups": [
{
"group": "Infisical PAM",
- "pages": ["documentation/platform/pam/overview"]
+ "pages": [
+ "documentation/platform/pam/overview",
+ "documentation/platform/pam/session-recording"
+ ]
}
]
}
diff --git a/docs/documentation/platform/pam/session-recording.mdx b/docs/documentation/platform/pam/session-recording.mdx
new file mode 100644
index 000000000..7e560d5c2
--- /dev/null
+++ b/docs/documentation/platform/pam/session-recording.mdx
@@ -0,0 +1,60 @@
+---
+title: "Session Recording"
+sidebarTitle: "Session Recording"
+description: "Learn how Infisical records and stores session activity for auditing and monitoring."
+---
+
+Infisical's Privileged Access Management (PAM) provides robust session recording capabilities to help you audit and monitor user activity across your infrastructure.
+
+## How It Works
+
+When a user initiates a session through the Infisical Gateway, a recording of the session begins. The gateway securely caches all recording data in temporary encrypted files on its local system.
+
+Once the session concludes, the gateway transmits the complete recording to the Infisical platform for long-term, centralized storage. This asynchronous process ensures that sessions remain operational even if the connection to the Infisical platform is temporarily lost. After the upload is complete, administrators can search and review the session logs in the Infisical UI.
+
+## What's Captured
+
+The content captured during a session depends on the type of resource being accessed.
+
+### Database Sessions
+
+For database connections, Infisical captures all queries executed and their corresponding responses.
+
+
+Support for additional resource types like SSH and RDP is coming soon.
+
+
+## Viewing Recordings
+
+To review session recordings:
+
+1. Navigate to the **PAM Sessions** page in your project.
+2. Click on a session from the list to view its details.
+
+
+
+The session details page provides key information, including the complete session logs, connection status, the user who initiated it, and more.
+
+
+
+### Searching Logs
+
+You can use the search bar to quickly find relevant information:
+
+- **On the main Sessions page:** Search across all session logs to locate specific queries or outputs.
+- **On an individual session page:** Search within that specific session's logs to pinpoint activity.
+
+
+
+
+
+## FAQ
+
+
+
+ Yes. All session recordings are encrypted at rest by default, ensuring your audit data is always secure.
+
+
+ Currently, Infisical uses an asynchronous approach where the gateway records the entire session locally before uploading it. This design makes your PAM sessions more resilient, as they don't depend on a constant, active connection to the Infisical platform. We may introduce live streaming capabilities in a future release.
+
+
diff --git a/docs/images/pam/session-recording/individual-session-page-search.png b/docs/images/pam/session-recording/individual-session-page-search.png
new file mode 100644
index 000000000..ce369f515
Binary files /dev/null and b/docs/images/pam/session-recording/individual-session-page-search.png differ
diff --git a/docs/images/pam/session-recording/individual-session-page.png b/docs/images/pam/session-recording/individual-session-page.png
new file mode 100644
index 000000000..2926caf67
Binary files /dev/null and b/docs/images/pam/session-recording/individual-session-page.png differ
diff --git a/docs/images/pam/session-recording/sessions-page-search.png b/docs/images/pam/session-recording/sessions-page-search.png
new file mode 100644
index 000000000..a90cda587
Binary files /dev/null and b/docs/images/pam/session-recording/sessions-page-search.png differ
diff --git a/docs/images/pam/session-recording/sessions-page.png b/docs/images/pam/session-recording/sessions-page.png
new file mode 100644
index 000000000..8faab291d
Binary files /dev/null and b/docs/images/pam/session-recording/sessions-page.png differ