b3da911d51
chore: bump version to 1.4.0
2026-05-04 09:33:54 +10:00
967e470e39
feat: list ignore.lst rules in startup Telegram notice
2026-05-04 09:30:24 +10:00
ace7220752
feat: log ignore.lst reload with rule counts
2026-05-04 09:11:03 +10:00
bdcf2bdc5f
docs: expand ignore.lst section in README and README_eng
2026-05-04 09:02:14 +10:00
57bc617d26
Sanitize ignore.lst.example placeholders
...
Replace sample workstation, domain user, and IP with generic values.
2026-05-04 08:25:21 +10:00
17befc867e
Document ignore.lst in README and DEPLOY
...
Describe optional Security 4624/4625 suppression, UTF-8, and that deploy does not ship ignore.lst.
2026-05-04 07:56:49 +10:00
d3154ceb1b
Add ignore.lst filtering for Security logon alerts
...
Support user/workstation/IP rules and Telegram-style lines; add ignore.lst.example; bump to 1.3.14.
2026-05-04 07:55:24 +10:00
fe600790e8
docs(license): update copyright holder name
2026-05-03 18:55:00 +10:00
11736501ec
chore: add MIT LICENSE
2026-05-03 18:54:16 +10:00
e96131d722
docs: refresh README, add English README_eng.md
...
Document daily report, deploy marker, SkipScheduledTaskMaintenance, and legacy watchdog scripts. Add full English translation.
2026-05-03 18:52:18 +10:00
99be51467e
Refine RD Gateway 303 semantics and show deploy update timestamp
2026-04-30 16:55:30 +10:00
d26784fb7f
Refresh README for current ProgramData + Deploy workflow
2026-04-30 16:43:14 +10:00
02424875fb
Add repository search keywords to README
2026-04-30 16:34:26 +10:00
0e2b3f2534
Clarify manual deploy option for small server fleets
2026-04-30 16:31:33 +10:00
b6ac34a52d
Add periodic deploy task installer and docs for rarely rebooted servers
2026-04-30 16:21:42 +10:00
a37a639be1
Fix RD Gateway 302/303 field mapping (XML + updated Properties layout).
...
Bump version to 1.3.12.
2026-04-30 16:05:21 +10:00
1c14eec3cd
Update DEPLOY.md with a tested GPO startup setup and troubleshooting notes.
...
Document PowerShell Startup tab usage, security filtering for computer groups, SYSVOL/NETLOGON behavior, reboot expectations, and where to inspect logs.
2026-04-29 17:47:21 +10:00
cc8925f88a
Start main task immediately after InstallTasks and include script version in startup notification.
...
Also bump script/version.txt to 1.3.11 for rollout tracking.
2026-04-29 16:45:13 +10:00
a20055f9d3
Singleton lock: DeleteOnClose, Ctrl+C propagates, release in finally (v1.3.9)
2026-04-29 16:23:16 +10:00
313cc189e9
v1.3.5: путь скрипта при Start-Process, диагностика watchdog, DEPLOY.md
2026-04-29 16:13:14 +10:00
e0b0fa3d7e
Watchdog: schtasks /Run после установки; DEPLOY/README про задачи и UNC; версия 1.3.4
2026-04-29 16:07:35 +10:00
80f57c5351
Добавлен доменный деплой (Deploy-LoginMonitor.ps1, version.txt), DEPLOY.md, правки README и комментарий к версии в Login_Monitor.ps1
2026-04-29 15:14:41 +10:00
306b0762a1
Workstation vs server: ProductType; WKS uses LT10 + RCM 1149; server keeps 2/3/10 (v1.2.0)
2026-04-29 14:30:28 +10:00
6bc5173236
auditpol: detect RU only from /list, not culture; fall back to EN (Hyper-V); v1.1.3
2026-04-27 10:47:16 +10:00
be0c394ac4
Fix Uc RU category string: add missing 0x0445 in vyhod (auditpol 0x57); v1.1.2
2026-04-27 10:29:10 +10:00
850781a38d
Revert "Use ASCII-only source for Telegram and logs; remove emoji (v1.2.0)"
...
This reverts commit b16ebb028b
2026-04-27 10:25:55 +10:00
b032de9d1c
Use ASCII-only source for Telegram and logs; remove emoji (v1.2.0)
...
Prevents mojibake/parse errors when the .ps1 is saved with wrong encoding after download. RU auditpol subcategory names remain via Uc(); Telegram messages and Write-Log are English.
2026-04-27 10:24:09 +10:00
4a4a736eb9
Harden auditpol block: build RU category strings via Uc, English log lines, bump to 1.1.1
...
Avoids mojibake/parse errors when the script is downloaded with broken UTF-8; keep Windows RU subcategory names as Unicode code points.
2026-04-27 10:19:09 +10:00
383ffb0bf8
Add script version to startup log and admin error
2026-04-27 10:07:23 +10:00
3d03d905a1
Fix scheduling checks and harden Telegram message formatting.
...
Correct daily rotation/report trigger logic to run after the configured slot once per period, avoid duplicate stop notifications on fatal errors, and HTML-escape dynamic Telegram fields to prevent markup breakage.
2026-04-27 10:01:42 +10:00
4f0b6e219c
Add Install-ScheduledTasks.ps1 for Task Scheduler registration; document in README
2026-04-13 11:29:21 +10:00
b164e51965
README: remove internal PMG/LDAP filter details from public docs
2026-04-13 11:23:44 +10:00
0dce7e7017
Fix daily report: force array for unique users (PS 5.1 Count on scalar)
2026-04-13 11:12:44 +10:00
9f680dfd89
Telegram Security events: show log server vs workstation (4624/4625)
2026-04-13 10:59:02 +10:00
685ef5260a
Clarify startup Telegram: Gateway targets internal PCs; exclude Gateway-only from RDS host line
2026-04-13 10:53:10 +10:00
2826e3f9cd
Telegram startup: mention RDS and RD Gateway when applicable
2026-04-13 10:49:30 +10:00
848381e098
Use UTF-8 BOM for logs; document FAR encoding
2026-04-13 10:33:11 +10:00
99ab020347
Document recent monitoring and auditpol improvements
2026-04-11 22:16:13 +10:00
65469cf1d2
Improve auditpol parsing for RU logon/logoff category output
2026-04-11 22:14:31 +10:00
0c9faece92
Fix auditpol localization (RU logon subcategory) and reduce noise
2026-04-11 21:57:16 +10:00
d0171daf8e
Fix auditpol for RU subcategory and safer stderr handling
2026-04-11 21:48:49 +10:00
16baf12094
Update scripts
2026-04-11 21:23:34 +10:00
c5a4c26b1e
Add editor/gitattributes defaults for PowerShell encoding
2026-04-11 21:23:27 +10:00
89acb0a914
Update README.md
2026-04-09 16:42:00 +10:00
21ad87d08d
Add login monitor, watchdog and Task Scheduler docs
2026-04-09 16:36:27 +10:00
PTah