feat: persistent Security poll cursor with lookback replay (2.0.36-SAC)

Save last_security_poll.txt between runs and replay Security events up to SecurityEventsLookbackMinutes on startup so slow boot or late agent start does not miss RDP/WinRM-related logons. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-16 09:39:43 +10:00
parent 1fcd5cb5cf
commit ae86cb3ea7
2 changed files with 50 additions and 0 deletions
@@ -15,6 +15,7 @@ $suites = @(
    'Test-ScriptSyntaxAll.ps1',
    'Test-TaskQueryModule.ps1',
    'Test-DeployTaskLimit.ps1',
+    'Test-SecurityPollCursor.ps1',
    'Test-SendDeploySacNotice.ps1'
 )