1. A method for reviewing previously recorded and real-time user session data of presentation layer protocol data, the method comprising: (a) receiving, by a shadowing tool executing on a computing device, a streaming real-time presentation layer protocol data stream from a shadowing agent service executing on a server; (b) receiving, by the shadowing tool, a recorded presentation layer protocol data stream from the shadowing agent service; and (c) combining, by the shadowing tool, the streaming real-time presentation layer protocol data stream and the recorded presentation layer protocol data stream producing a single output stream.