feat: send rdp.session.logoff on Security 4634/4647 (2.1.11-SAC)
Direct LAN RDP logout is reported to SAC with the same workstation filters as login (LogonType 10), dedup against paired 4647/4634, and ignore.lst logoff scope.
This commit is contained in:
+1
-1
@@ -1,6 +1,6 @@
|
||||
# RDP Login Monitor
|
||||
|
||||
**Version:** `2.1.5-SAC` (`$ScriptVersion` + `version.txt`)
|
||||
**Version:** `2.1.11-SAC` (`$ScriptVersion` + `version.txt`)
|
||||
|
||||
PowerShell toolkit for monitoring Windows logons with Telegram and/or Email (SMTP) notifications.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user