Abstract: A method for identifying a shared credential within a networked computing environment. The method includes a computer processor accessing information corresponding to an aggregated plurality of authentication events within a networked computing environment. The method further includes identifying one or more credentials that are associated with the aggregated plurality of authentication events. The method further includes analyzing a frequency of usage of a first credential that is included in the identified one or more credentials. The method further includes determining that the first credential is shared, based at least in part, on the analysis of the frequency of usage of the first credential in authentication events by one or more hosts, and information related to authentication events corresponding to the one or more hosts that utilize the credential in authentication events. The method further includes generating a report that identifies that the first credential is shared.

Abstract: In an approach for providing auditable retrieval of privileged credentials in a privilege identity management (PIM) system, a processor invokes a checkout of a PIM credential, based on, at least, a determination that a PIM server cannot be accessed. A processor receives a request to access the PIM credential by a user. A processor receives validation of the request to access the PIM credential and an identity of the user. A processor retrieves the PIM credential from a database, wherein the database stores a plurality of PIM credentials owned by a system owner.

Abstract: A method for identifying a shared credential within a networked computing environment. The method includes a computer processor accessing information corresponding to an aggregated plurality of authentication events within a networked computing environment. The method further includes identifying one or more credentials that are associated with the aggregated plurality of authentication events. The method further includes analyzing a frequency of usage of a first credential that is included in the identified one or more credentials. The method further includes determining that the first credential is shared, based at least in part, on the analysis of the frequency of usage of the first credential in authentication events by one or more hosts, and information related to authentication events corresponding to the one or more hosts that utilize the credential in authentication events. The method further includes generating a report that identifies that the first credential is shared.

Abstract: In an approach for providing auditable retrieval of privileged credentials in a privilege identity management (PIM) system, a processor invokes a checkout of a PIM credential, based on, at least, a determination that a PIM server cannot be accessed. A processor receives a request to access the PIM credential by a user. A processor receives validation of the request to access the PIM credential and an identity of the user. A processor retrieves the PIM credential from a database, wherein the database stores a plurality of PIM credentials owned by a system owner.

Abstract: In an approach for providing auditable retrieval of privileged credentials in a privilege identity management (PIM) system, a processor invokes a checkout of a PIM credential, based on, at least, a determination that a PIM server cannot be accessed. A processor receives a request to access the PIM credential by a user. A processor receives validation of the request to access the PIM credential and an identity of the user. A processor retrieves the PIM credential from a database, wherein the database stores a plurality of PIM credentials owned by a system owner.

Abstract: In an approach for providing auditable retrieval of privileged credentials in a privilege identity management (PIM) system, a processor invokes a checkout of a PIM credential, based on, at least, a determination that a PIM server cannot be accessed. A processor receives a request to access the PIM credential by a user. A processor receives validation of the request to access the PIM credential and an identity of the user. A processor retrieves the PIM credential from a database, wherein the database stores a plurality of PIM credentials owned by a system owner.

Abstract: In an approach for providing auditable retrieval of privileged credentials in a privilege identity management (PIM) system, a processor invokes a checkout of a PIM credential, based on, at least, a determination that a PIM server cannot be accessed. A processor receives a request to access the PIM credential by a user. A processor receives validation of the request to access the PIM credential and an identity of the user. A processor retrieves the PIM credential from a database, wherein the database stores a plurality of PIM credentials owned by a system owner.

Abstract: Auditing activity of a user on a user computing device is provided. When the user computing device receives an input in a graphical user interface (GUI) from a human interface device (HID), an active window is identified within a captured screenshot by locating a screen location of the HID input in the GUI. The active window along with an extracted textual title of the active window, the screen location of the HID input and a user identifier are stored to a data store.

Abstract: In an approach for providing auditable retrieval of privileged credentials in a privilege identity management (PIM) system, a processor invokes a checkout of a PIM credential, based on, at least, a determination that a PIM server cannot be accessed. A processor receives a request to access the PIM credential by a user. A processor receives validation of the request to access the PIM credential and an identity of the user. A processor retrieves the PIM credential from a database, wherein the database stores a plurality of PIM credentials owned by a system owner.