PapaTramp/RDP-login-monitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
141 Commits 1 Branch 1 Tag
5fc5f2a9ada869a2aa62ae3f920d9f38f6df64ef
Commit Graph

16 Commits

Author SHA1 Message Date
PTah 5fc5f2a9ad feat: monitor admin share access via Security 5140 C$/ADMIN$ (2.0.19-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-04 10:14:14 +10:00
PTah e00513f050 feat: deploy patch for MaxBackupDays default (2.0.13-SAC) 
Add deploy-time patch when login_monitor.settings.ps1 lacks MaxBackupDays,
enable the setting in example, and remove duplicate default in Login_Monitor.ps1.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 11:25:21 +10:00
PTah 22ac7a32c7 feat: shutdown diagnostics and log backup retention (2.0.12-SAC) 
- Log phase, uptime, batch sizes and shutdown path on unexpected stop

- PipelineStopped sends SAC alert with diagnostics; fix StopNotificationSent on settings reload

- Summarize large Skip 4624 batches; Remove-LogBackupsBeyondRetention uses MaxBackupDays from settings

- Purge LoginLog_*.bak on rotation, daily rotation check and startup

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 11:07:03 +10:00
PTah 335768915b feat: deploy UseSAC fallback by default and prevent duplicate daily reports 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 09:15:22 +10:00
PTah b010ad01eb fix: filter WinRM noise (HealthMailbox, machine accounts, loopback) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-30 10:31:30 +10:00
PTah 724baa6c0a feat: monitor RDS Shadow Control and WinRM inbound (warning alerts, 1.2.23-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-30 10:20:57 +10:00
PTah 2bbf1face6 fix(deploy): patch DailyReportEnabled hint and invalid false assignment (1.2.22-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 17:50:17 +10:00
PTah d23e99a885 feat: unify Windows daily report with SAC layout; DailyReportEnabled toggle 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-29 17:18:02 +10:00
PTah 49359c07a6 fix: tolerate missing ServerDisplayName and send host.ipv4 (1.2.17-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 13:33:26 +10:00
PTah 737da07d6a fix: add Exchange 4624 LT3 empty-IP filter switch 
Add configurable `${Ignore4624-LT3-EmptyIP-Event}` for RDP monitor to suppress noisy 4624 network logons with empty IP (-) on mail/Exchange hosts.
Update settings example and README with usage instructions.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 12:35:40 +10:00
PTah b9d385f51b feat: ServerDisplayName для Telegram и SAC host.display_name (1.2.15-SAC) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-05-28 11:49:13 +10:00
PTah 1b4ca5fa01 feat: bootstrap SAC settings on deploy when upgrading from pre-SAC 
Deploy overwrites login_monitor.settings.ps1 from the trusted example when
Sac-Client.ps1 or SacApiKey/UseSAC are missing, with a .bak backup. Skips
overwrite when SAC is already configured; continues deploy on version match
if SAC bootstrap is still required.
 2026-05-27 15:23:32 +10:00
PTah 22a32bc1cb feat: graceful restart without Stop-Process; SAC key in settings example 2026-05-27 14:43:04 +10:00
PTah bd8076a1d0 docs: Windows/SAC update checklist; default Telegram in settings example 2026-05-27 14:27:27 +10:00
PTah edbe00ffb3 feat: SAC client 1.2.0-SAC and daily report details for ingest 2026-05-27 14:15:16 +10:00
PTah 577b8bc220 feat(Login): вынести локальные настройки в login_monitor.settings.ps1 
Секреты, SMTP, 4740 и IP-исключения больше не в Login_Monitor.ps1 —
не слетают при автообновлении с NETLOGON. Deploy создаёт settings из example при первой установке.
 2026-05-25 09:44:43 +10:00