82c63fb9a8
feat: host inventory to SAC every 12h (GetInventory)
...
Collect CPU/RAM/disks/GPU/OS via agent.inventory; setting $GetInventory (default true); deploy adds missing setting.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-05 09:53:03 +10:00
5fc5f2a9ad
feat: monitor admin share access via Security 5140 C$/ADMIN$ (2.0.19-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-04 10:14:14 +10:00
e00513f050
feat: deploy patch for MaxBackupDays default (2.0.13-SAC)
...
Add deploy-time patch when login_monitor.settings.ps1 lacks MaxBackupDays,
enable the setting in example, and remove duplicate default in Login_Monitor.ps1.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-03 11:25:21 +10:00
22ac7a32c7
feat: shutdown diagnostics and log backup retention (2.0.12-SAC)
...
- Log phase, uptime, batch sizes and shutdown path on unexpected stop
- PipelineStopped sends SAC alert with diagnostics; fix StopNotificationSent on settings reload
- Summarize large Skip 4624 batches; Remove-LogBackupsBeyondRetention uses MaxBackupDays from settings
- Purge LoginLog_*.bak on rotation, daily rotation check and startup
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-03 11:07:03 +10:00
335768915b
feat: deploy UseSAC fallback by default and prevent duplicate daily reports
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-06-03 09:15:22 +10:00
b010ad01eb
fix: filter WinRM noise (HealthMailbox, machine accounts, loopback)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-30 10:31:30 +10:00
724baa6c0a
feat: monitor RDS Shadow Control and WinRM inbound (warning alerts, 1.2.23-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-30 10:20:57 +10:00
2bbf1face6
fix(deploy): patch DailyReportEnabled hint and invalid false assignment (1.2.22-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-29 17:50:17 +10:00
d23e99a885
feat: unify Windows daily report with SAC layout; DailyReportEnabled toggle
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-29 17:18:02 +10:00
49359c07a6
fix: tolerate missing ServerDisplayName and send host.ipv4 (1.2.17-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 13:33:26 +10:00
737da07d6a
fix: add Exchange 4624 LT3 empty-IP filter switch
...
Add configurable `${Ignore4624-LT3-EmptyIP-Event}` for RDP monitor to suppress noisy 4624 network logons with empty IP (-) on mail/Exchange hosts.
Update settings example and README with usage instructions.
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 12:35:40 +10:00
b9d385f51b
feat: ServerDisplayName для Telegram и SAC host.display_name (1.2.15-SAC)
...
Co-authored-by: Cursor <cursoragent@cursor.com >
2026-05-28 11:49:13 +10:00
1b4ca5fa01
feat: bootstrap SAC settings on deploy when upgrading from pre-SAC
...
Deploy overwrites login_monitor.settings.ps1 from the trusted example when
Sac-Client.ps1 or SacApiKey/UseSAC are missing, with a .bak backup. Skips
overwrite when SAC is already configured; continues deploy on version match
if SAC bootstrap is still required.
2026-05-27 15:23:32 +10:00
22a32bc1cb
feat: graceful restart without Stop-Process; SAC key in settings example
2026-05-27 14:43:04 +10:00
bd8076a1d0
docs: Windows/SAC update checklist; default Telegram in settings example
2026-05-27 14:27:27 +10:00
edbe00ffb3
feat: SAC client 1.2.0-SAC and daily report details for ingest
2026-05-27 14:15:16 +10:00
577b8bc220
feat(Login): вынести локальные настройки в login_monitor.settings.ps1
...
Секреты, SMTP, 4740 и IP-исключения больше не в Login_Monitor.ps1 —
не слетают при автообновлении с NETLOGON. Deploy создаёт settings из example при первой установке.
2026-05-25 09:44:43 +10:00
PTah