fix: qwinsta username fallback when RCM 1149 user empty (2.1.14-SAC)

On some Win10 Pro hosts EventLog 1149 has blank Param1/Param2; resolve the sole RDP session user from qwinsta before emitting Sac/notify events.
This commit is contained in:
PTah
2026-07-14 10:45:56 +10:00
parent a746a82f2a
commit f7b3597206
4 changed files with 83 additions and 4 deletions
+1 -1
View File
@@ -1 +1 @@
2.1.13-SAC
2.1.14-SAC