If you notice that a user is performing an unauthorized or high-risk operation on a host during real-time monitoring, you can use the session blocking feature to disconnect the user from the host.
If you notice that a user is performing an unauthorized or high-risk operation on a host during real-time monitoring, you can use the session blocking feature to disconnect the user from the host.