feat: SAC client 1.2.0-SAC and daily report details for ingest

This commit is contained in:
PTah
2026-05-27 14:15:16 +10:00
parent 577b8bc220
commit edbe00ffb3
8 changed files with 591 additions and 18 deletions
+13 -2
View File
@@ -9,8 +9,8 @@
#>
# --- Telegram (или DPAPI Base64 через Encrypt-DpapiForRdpMonitor.ps1) ---
$TelegramBotToken = '8239219522:AAEyOZX3cwNfgGOMDkf-mgjTIuoaOh5gF7I'
$TelegramChatID = '2843230'
$TelegramBotToken = ''
$TelegramChatID = ''
# $TelegramBotTokenProtectedB64 = ''
# $TelegramChatIDProtectedB64 = ''
@@ -26,6 +26,17 @@ $NotifyOrder = 'tg'
# $MailSmtpSsl = $false
# $MailSmtpPasswordProtectedB64 = ''
# --- Security Alert Center (SAC) ---
# off | exclusive | dual | fallback — см. security-alert-center/docs/agent-integration.md
# $UseSAC = 'exclusive'
# $SacUrl = 'https://sac.kalinamall.ru'
# $SacApiKey = 'sac_xxxxxxxx'
# $SacSpoolDir = 'C:\ProgramData\RDP-login-monitor\sac-spool'
# $SacTimeoutSec = 12
# $SacTlsSkipVerify = $false
# $SacFallbackFailures = 5
# Проверка: powershell -File Login_Monitor.ps1 -CheckSac
# --- Узкое исключение шумовых сетевых логонов (LogonType=3, Advapi) ---
$IgnoreAdvapiNetworkLogonSourceIps = @(
'192.168.160.57'