Silent Media Capture
A comprehensive guide to understanding, configuring, and leveraging the automated Silent Media Capture engine in Login AlertX.
Overview & Forensic Evidence
When an unauthorized person gains physical or remote access to your workstation, receiving a simple timestamp and username is often not enough to establish indisputable proof of identity. Login AlertX bridges this gap with an advanced Silent Media Capture engine that immediately captures visual and acoustic evidence the moment an event occurs.
Operating completely in the background without launching user interface windows or causing disruptive desktop flashes, the system records evidence and dispatches it immediately to your private alert channels — giving you undeniable forensic verification of who is sitting at your desk.
The Triple-Capture System
1. Silent Webcam Snapshot
Directly addresses your primary webcam using native DirectShow and MediaFoundation APIs to capture a crisp, high-resolution snapshot within milliseconds of a login or failed attempt.
2. Desktop Screenshot
Captures a complete snapshot of all connected monitors at native resolution, showing exactly which files, windows, and applications were active on screen during the access event.
3. WASAPI Audio Recording
Records ambient room audio for a configurable duration (5 to 60 seconds) using the Windows Audio Session API (WASAPI) to capture voices and environmental context.
Smart Fast-Path Event Bypass
Login AlertX intelligently differentiates between interactive access events and system shutdown/lock events to guarantee the fastest alert dispatch possible:
- Interactive Events (Login, Unlock, Failed Login, RDP Connect): Trigger the full media capture pipeline so you capture the intruder’s face and desktop activity immediately.
- System Standby Events (Screen Lock, Sleep, Hibernate, Shutdown): Intentionally bypass camera initialization and audio recording. This ensures notifications dispatch in under 200 milliseconds before the operating system cuts network power or terminates user sessions.
Supported Delivery Channels
Media captures can be attached and delivered across multiple channels simultaneously based on your subscription settings:
| Channel | Webcam Snapshot | Desktop Screenshot | Ambient Audio (.wav) |
|---|---|---|---|
| Email (SMTP / Google OAuth / Outlook) | ✔ Attached / Embedded | ✔ Attached / Embedded | ✔ Attached (.wav) |
| Telegram (Built-in) | ✔ Inline Photo | ✔ Inline Photo | ✔ Audio Message |
| Discord Webhook | ✔ Embedded Image | ✔ Embedded Image | — |
| Slack Webhook / Bot | ✔ File Upload | ✔ File Upload | — |
| Custom Webhooks | ✔ Base64 / Multipart | ✔ Base64 / Multipart | ✔ Base64 / Multipart |
Privacy & Local Encryption
- Zero Cloud Image Storage: Media files are stored locally in your protected machine directories (
%LocalAppData%LoginAlertXCaptures). They are never uploaded to or analyzed on Login AlertX company servers. - Strict ACL Protection: The captures directory is restricted to your specific user profile and the local
SYSTEMaccount, preventing standard unprivileged programs from viewing stored captures. - Automated Storage Pruning: Integrated with Storage Management to automatically prune older photos and recordings according to your retention schedules.
Configuring Media Captures
- Open Login AlertX from the system tray.
- In the sidebar navigation, click Security & Captures.
- Toggle your preferred capture sources:
- Enable Webcam Capture: Select your preferred camera from the dropdown if multiple webcams are connected.
- Enable Desktop Screenshot: Captures all displays upon login.
- Enable Audio Recording: Adjust the duration slider (default: 10 seconds).
- Click Save Settings.
