feat: send rdp.session.logoff on Security 4634/4647 (2.1.11-SAC)

Direct LAN RDP logout is reported to SAC with the same workstation filters as login (LogonType 10), dedup against paired 4647/4634, and ignore.lst logoff scope.
This commit is contained in:
PTah
2026-07-13 17:10:24 +10:00
parent ac2384a479
commit 23fa83ddd6
4 changed files with 107 additions and 14 deletions
+1 -1
View File
@@ -1,6 +1,6 @@
# RDP Login Monitor
**Version:** `2.1.5-SAC` (`$ScriptVersion` + `version.txt`)
**Version:** `2.1.11-SAC` (`$ScriptVersion` + `version.txt`)
PowerShell toolkit for monitoring Windows logons with Telegram and/or Email (SMTP) notifications.