e21fae2ae5
fix: audit hardening 2.1.10-SAC — gitignore, SAC TLS warn, Exchange safety
...
- Extend .gitignore for local settings, logs, spool, backups
- Log CRITICAL when SacTlsSkipVerify is enabled (Login_Monitor + Sac-Client)
- Exchange-MailSecurity: -WhatIf dry-run, scan safety warnings, v1.6.8
- Remove legacy Watchdog_RDP_Monitor.ps1 and Install-ScheduledTasks.ps1
- Add scripts for GitHub sanitize mirror push workflow
2026-07-07 20:20:00 +10:00
4b8e3313ae
docs: document -NetlogonDest UNC path for update-rdp-monitor.ps1
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-24 09:21:17 +10:00
b4dd593160
docs: SAC WinRM update path without NETLOGON
...
Добавлен раздел об обновлении RDP через SAC: zip с сервера, staging и Deploy-LoginMonitor.ps1.
2026-06-20 20:03:59 +10:00
35e25063e3
chore(github): generic NETLOGON paths, remove mirror scripts
...
Replace \\B26\\NETLOGON with \\dc.contoso.local\\NETLOGON.
Remove scripts/ mirror tools and tools/Push-KalinamallOnly.ps1.
Sanitize login_monitor.settings.example (placeholders, no secrets).
Simplify update-rdp-monitor.ps1 to use origin remote only.
Keep dev tooling under tools/ only.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-16 11:57:35 +10:00
8d17a0f560
chore(docs): GitHub default clone URL, remove .cursor from git
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-16 11:37:48 +10:00
80b2337d61
fix(winrm): Exchange strict mode to suppress false 91/4624 alerts
...
On Exchange role: require user in WinRM Event 91 EventData; correlate 4624 only when LogonProcess is WinRM. Prevents Outlook/LT3 false positives. Version 2.0.23-SAC.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-05 11:07:21 +10:00
e738d97c9c
chore: release 1.2.27-SAC (deploy version compare + docs)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-31 11:18:58 +10:00
1fe8bd9f7d
fix(deploy): version compare for -SAC labels; refresh deploy docs
...
Compare deployed_version.txt with full label (e.g. 1.2.26-SAC) so GPO deploy exits when up to date. Restructure deploy-rdp-login-monitor.md with mermaid flow, Exchange vs DomainMonitors split, and remove duplicated sections.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-31 11:13:33 +10:00
bf04c8865c
feat(deploy): auto-add Exchange WinRM/4624 noise settings on role detect (1.2.26-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-30 10:36:00 +10:00
2bbf1face6
fix(deploy): patch DailyReportEnabled hint and invalid false assignment (1.2.22-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-29 17:50:17 +10:00
70f06790f6
docs: deploy adds commented ServerDisplayName hint in settings
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-29 15:57:35 +10:00
c249451eba
fix: deploy syncs Sac-Client bundle, SAC dual settings, and ServerDisplayName hint (1.2.20-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-29 15:55:16 +10:00
004a8c0026
fix: deploy graceful recycle writes restart.request directly (no 90s wait)
2026-05-27 14:53:54 +10:00
22a32bc1cb
feat: graceful restart without Stop-Process; SAC key in settings example
2026-05-27 14:43:04 +10:00
bd8076a1d0
docs: Windows/SAC update checklist; default Telegram in settings example
2026-05-27 14:27:27 +10:00
edbe00ffb3
feat: SAC client 1.2.0-SAC and daily report details for ingest
2026-05-27 14:15:16 +10:00
577b8bc220
feat(Login): вынести локальные настройки в login_monitor.settings.ps1
...
Секреты, SMTP, 4740 и IP-исключения больше не в Login_Monitor.ps1 —
не слетают при автообновлении с NETLOGON. Deploy создаёт settings из example при первой установке.
2026-05-25 09:44:43 +10:00
1584be89e2
feat(Exchange): skip corrupt inbox rule stores (v1.6.5)
...
Add SkipInboxScanMailboxes with k.selezneva@kalinamall.ru by default. Filter inbox scan list, log SKIP, and catch Get-InboxRule failures to avoid Watson aborting full scans.
2026-05-22 16:00:09 +10:00
cdf563cbe9
fix(deploy): copy exchange_monitor.settings.example to ProgramData (v1.6.4)
...
Example settings were published to NETLOGON but omitted from Deploy-DomainMonitors file list, so Copy-Item from ProgramData failed on fresh installs.
2026-05-22 15:00:30 +10:00
7c13c96622
fix: Deploy-DomainMonitors encoding for PS 5.1 / NETLOGON (v1.6.2)
...
- ASCII runtime strings in domain deploy/install scripts
- Publish *.ps1 to NETLOGON with UTF-8 BOM
2026-05-22 14:53:28 +10:00
0c916b50c6
feat(Exchange): VIP scan, disabled rules, first-baseline suppress (v1.6.1)
...
- VipMailboxes + VipMailboxPatterns; unified VIP scope
- Scan disabled inbox rules with external forward (lower severity)
- Suppress per-finding alerts on first baseline run
- Post-scan summary and install notification
2026-05-22 14:44:57 +10:00
9ab6cc64a1
docs: add Docs/ guides; Exchange Mail Security scripts (v1.6.0)
...
- Docs: RDP deploy, Exchange mail security, NETLOGON publish
- Exchange-MailSecurity.ps1, Notify-Common, Deploy/Install-DomainMonitors
- DEPLOY.md redirects to Docs/
2026-05-22 14:32:50 +10:00
PTah