PapaTramp/RDP-login-monitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Commit Graph

  • 038363c5c7 fix: UTF-8 BOM for PS 5.1 script parsing (2.1.15-SAC) main PTah 2026-07-14 20:04:42 +10:00
  • f7b3597206 fix: qwinsta username fallback when RCM 1149 user empty (2.1.14-SAC) PTah 2026-07-14 10:45:56 +10:00
  • a746a82f2a fix: parse RCM 1149 UserData/EventXML for RDG logins (2.1.13-SAC) PTah 2026-07-13 19:36:56 +10:00
  • 6d5dfbbeed fix: rdp.session.logoff only on workstations, not DC/Exchange (2.1.12-SAC) PTah 2026-07-13 17:36:31 +10:00
  • 23fa83ddd6 feat: send rdp.session.logoff on Security 4634/4647 (2.1.11-SAC) PTah 2026-07-13 17:10:24 +10:00
  • ac2384a479 fix(scripts): GitHub sanitize rewrites kalinamall doc URLs reliably PTah 2026-07-07 20:22:22 +10:00
  • e21fae2ae5 fix: audit hardening 2.1.10-SAC — gitignore, SAC TLS warn, Exchange safety PTah 2026-07-07 20:20:00 +10:00
  • 6d52a34a37 fix(scripts): papatramp Git URLs use PapaTramp org, not PTah PTah 2026-07-07 17:49:19 +10:00
  • f033d5bd87 fix: daily report без локального Telegram при fallback SAC (2.1.9-SAC) PTah 2026-07-06 12:00:36 +10:00
  • f2bcc6c7df fix: restore production secrets on kalinamall and repair placeholder settings (2.1.8-SAC) PTah 2026-06-25 14:31:53 +10:00
  • 5708e42c66 fix: dedup RDG 302 notify by user+target+external IP (2.1.7-SAC) PTah 2026-06-25 10:03:26 +10:00
  • 8a937b8f17 fix: quarantine corrupt SAC spool files, flush newest first (2.1.6-SAC) PTah 2026-06-25 09:09:54 +10:00
  • ccd50a085d fix: RCM 1149 silent drop on RDS servers (2.1.5-SAC) PTah 2026-06-24 14:29:02 +10:00
  • 55d58b25a3 docs: sync README version lines with 2.1.4-SAC PTah 2026-06-24 14:14:43 +10:00
  • 4b8e3313ae docs: document -NetlogonDest UNC path for update-rdp-monitor.ps1 PTah 2026-06-24 09:21:17 +10:00
  • ab53d47329 feat: RCM 1149 on RDS servers and login dedup (2.1.4-SAC) PTah 2026-06-23 15:01:09 +10:00
  • eecc0e1619 docs(deploy): clarify DailyReportEnabled comment in settings patch PTah 2026-06-23 14:41:53 +10:00
  • 128dd278f6 feat(deploy): sync ServerIPv4 hint and DailyReportEnabled on upgrade (2.1.3-SAC) PTah 2026-06-22 10:01:16 +10:00
  • 8cefba1952 Merge branch 'main' of ssh://git.kalinamall.ru:2222/PapaTramp/RDP-login-monitor PTah 2026-06-22 09:04:36 +10:00
  • b4dd593160 docs: SAC WinRM update path without NETLOGON PTah 2026-06-20 20:03:59 +10:00
  • f3a0adb7b8 fix: remove UTF-8 BOM from PowerShell entry scripts PTah 2026-06-20 19:07:52 +10:00
  • a0b473b4d7 docs: concise README for 2.1.2-SAC capabilities PTah 2026-06-20 19:02:59 +10:00
  • 2c1724fd90 fix: SAC poll URL interpolation in Sac-Client (2.1.2-SAC) PTah 2026-06-19 23:49:44 +10:00
  • a9ca50bc15 fix: default HeartbeatStaleAlertMultiplier (2.1.1-SAC) PTah 2026-06-19 23:47:48 +10:00
  • fb50fb3ea7 chore: bump version to 2.1.0-SAC PTah 2026-06-19 23:42:08 +10:00
  • 5d2b90779c feat: SAC agent command poll qwinsta/logoff (2.0.39-SAC) PTah 2026-06-19 23:37:58 +10:00
  • afa80d169f chore(github): keep sanitized settings on public main PTah 2026-06-17 11:12:59 +10:00
  • 7f38c00094 fix: restore production secrets and paths for private git PTah 2026-06-17 11:12:29 +10:00
  • c12f169189 merge: sync remotes; keep deploy StartupRebootDetectMinutes bootstrap PTah 2026-06-17 11:04:04 +10:00
  • 37fdeb44c5 feat: deploy bootstrap StartupRebootDetectMinutes in agent settings PTah 2026-06-17 11:02:50 +10:00
  • 746f9e23b2 feat: detect OS reboot on startup via System log and LastBootUpTime PTah 2026-06-17 10:42:40 +10:00
  • 35e25063e3 chore(github): generic NETLOGON paths, remove mirror scripts PTah 2026-06-16 11:57:01 +10:00
  • 7466254401 chore(docs): sync repository URLs for kalinamall mirror PTah 2026-06-16 11:38:26 +10:00
  • 8d17a0f560 chore(docs): GitHub default clone URL, remove .cursor from git PTah 2026-06-16 11:36:51 +10:00
  • ae86cb3ea7 feat: persistent Security poll cursor with lookback replay (2.0.36-SAC) PTah 2026-06-16 09:39:43 +10:00
  • c146bb119a chore(docs): GitHub default clone URL, remove .cursor from git PTah 2026-06-16 11:36:51 +10:00
  • 1fcd5cb5cf feat: persistent Security poll cursor with lookback replay (2.0.36-SAC) PTah 2026-06-16 09:40:15 +10:00
  • f48aee1d93 feat: persistent Security poll cursor with lookback replay (2.0.36-SAC) PTah 2026-06-16 09:39:43 +10:00
  • d5db38e2ae feat: deploy дописывает HeartbeatInterval при отсутствии в settings (2.0.35-SAC) PTah 2026-06-12 16:46:43 +10:00
  • 91cde1668c merge: GitHub main + heartbeat on startup (2.0.34-SAC) PTah 2026-06-12 11:52:15 +10:00
  • 09f1b576bf feat: send agent.heartbeat on monitor startup (2.0.34-SAC) PTah 2026-06-12 11:51:16 +10:00
  • b6d293d21b fix: normalize ExecutionTimeLimit PT0S and load TaskQuery locally (2.0.33-SAC) PTah 2026-06-11 15:27:47 +10:00
  • 6ee5fdcbf2 fix: normalize ExecutionTimeLimit PT0S and load TaskQuery locally (2.0.33-SAC) PTah 2026-06-11 15:27:38 +10:00
  • 0da1d0f2ac fix: deploy TaskQuery script scope (2.0.32-SAC) PTah 2026-06-11 15:23:59 +10:00
  • 5e9939724c fix: deploy TaskQuery script scope and internal autotests (2.0.32-SAC) PTah 2026-06-11 15:15:42 +10:00
  • 31ebd5d653 fix: deploy task limit check without TaskQuery helper deps (2.0.31-SAC) PTah 2026-06-11 15:05:02 +10:00
  • 5c23ac5f36 fix: deploy TaskQuery init must load Resolved helper (2.0.30-SAC) PTah 2026-06-11 15:02:08 +10:00
  • 6fa940dd43 fix: SendDeploySacNotice StrictMode and inline deploy task verify (2.0.29-SAC) PTah 2026-06-11 14:59:17 +10:00
  • 463a3ef08c fix: deploy task verify via schtasks XML and notify SAC on update (2.0.28-SAC) PTah 2026-06-11 14:47:49 +10:00
  • 399597c8a1 fix: sync HeartbeatInterval on every deploy, not only version upgrade PTah 2026-06-11 09:26:03 +10:00
  • 365a7113cf feat: heartbeat 4h and deploy rewrites settings (2.0.27-SAC) PTah 2026-06-10 17:25:20 +10:00
  • 01d7525c4a fix(deploy): escape TaskName in log string (PowerShell parser); 2.0.25-SAC PTah 2026-06-08 11:51:06 +10:00
  • 1d30ca2284 fix: RDP-Login-Monitor scheduled task unlimited ExecutionTimeLimit (2.0.24-SAC) PTah 2026-06-08 11:47:46 +10:00
  • 80b2337d61 fix(winrm): Exchange strict mode to suppress false 91/4624 alerts PTah 2026-06-05 11:07:21 +10:00
  • fe2e6d624f fix: inventory JSON without JavaScriptSerializer WARN (2.0.22-SAC) PTah 2026-06-05 10:00:11 +10:00
  • 82c63fb9a8 feat: host inventory to SAC every 12h (GetInventory) PTah 2026-06-05 09:53:03 +10:00
  • bd83dc84dc fix: StrictMode-safe File Share audit init (UseGuid key) PTah 2026-06-04 10:20:17 +10:00
  • afded8a495 docs: README highlights table and 2.0.19-SAC admin share 5140 PTah 2026-06-04 10:17:11 +10:00
  • 5fc5f2a9ad feat: monitor admin share access via Security 5140 C$/ADMIN$ (2.0.19-SAC) PTah 2026-06-04 10:14:14 +10:00
  • e3149785dc fix: daily report survives empty quser sessions (2.0.18-SAC) PTah 2026-06-04 09:32:43 +10:00
  • 6384a45395 fix: recognize auditpol RU Success+Failure as otказ not only sboy (2.0.17-SAC) PTah 2026-06-03 15:08:20 +10:00
  • 0acd591c83 fix: PS 5.1 empty SkipEntries breaks monitor loop (2.0.16-SAC) PTah 2026-06-03 15:06:35 +10:00
  • fa5248d501 fix: Sac-Client splat syntax for PS 5.1 PTah 2026-06-03 11:45:49 +10:00
  • f08a8a8561 fix: allow null SacOccurredAt on lifecycle notifications (2.0.15-SAC) PTah 2026-06-03 11:45:35 +10:00
  • 550cea9759 fix: RD Gateway startup replay, 1226 benign, SAC occurred_at (2.0.14-SAC) PTah 2026-06-03 11:42:03 +10:00
  • e00513f050 feat: deploy patch for MaxBackupDays default (2.0.13-SAC) PTah 2026-06-03 11:25:21 +10:00
  • 22ac7a32c7 feat: shutdown diagnostics and log backup retention (2.0.12-SAC) PTah 2026-06-03 11:07:03 +10:00
  • 92773948a7 fix: apply login_monitor.settings.ps1 to script scope (2.0.10-SAC) PTah 2026-06-03 10:33:27 +10:00
  • 7b83a19db0 fix: InstallTasks fails when settings WinRM lines lack dollar sign (2.0.9-SAC) PTah 2026-06-03 10:14:17 +10:00
  • 33367b05a8 fix: parse RD Gateway EventInfo XML and skip ephemeral 303 alerts PTah 2026-06-03 10:07:51 +10:00
  • 94d12e0b5f chore: sync Cursor rules from CursorRules (version bump RDP/SSH split) PTah 2026-06-03 09:31:56 +10:00
  • 4b8ff95344 chore: add Cursor rule to bump ScriptVersion and version.txt on script changes PTah 2026-06-03 09:29:23 +10:00
  • 47f95ba186 chore: bump release to 2.0.7-SAC PTah 2026-06-03 09:17:28 +10:00
  • 335768915b feat: deploy UseSAC fallback by default and prevent duplicate daily reports PTah 2026-06-03 09:15:22 +10:00
  • 5e5bc86e1b docs: add one-command quick start for first install PTah 2026-06-01 13:28:28 +10:00
  • 42d6af83f2 docs: add 5-minute WinRM stabilization checklist PTah 2026-06-01 13:26:32 +10:00
  • 52e9e62ede docs: refresh README for WinRM and current SAC integration state PTah 2026-06-01 13:25:16 +10:00
  • fae185421a fix: harden WinRM local IP detection and bump to 2.0.6-SAC PTah 2026-06-01 13:20:38 +10:00
  • afc7bf9dca fix: log exact WinRM skip reason and bump to 2.0.5-SAC PTah 2026-06-01 13:17:48 +10:00
  • ac095fe1a0 fix: parse WinRM 91 user/ip correctly and bump to 2.0.4-SAC PTah 2026-06-01 13:05:14 +10:00
  • 81323e8596 chore: bump RDP monitor version to 2.0.3-SAC PTah 2026-06-01 12:58:40 +10:00
  • 1eedfc736f fix: enforce WinRM inbound block and enable Operational log in deploy PTah 2026-06-01 12:55:05 +10:00
  • d54d04623f fix: PS 5.1 Sac-Client JSON types without uint alias 2.0.2-SAC PTah 2026-06-01 09:13:19 +10:00
  • 084494cfa8 fix: SAC JSON serialize daily report without PSMethod cycle 2.0.1-SAC PTah 2026-06-01 09:08:14 +10:00
  • 1a1467f910 chore: bump release to 2.0.0-SAC PTah 2026-06-01 09:03:48 +10:00
  • 543369832a fix: restore RD Gateway 302/303 polling and SAC ingest 1.2.35-SAC PTah 2026-06-01 08:14:37 +10:00
  • f970e284ac fix: stronger 4624 login dedup and logon type label 1.2.34-SAC PTah 2026-05-31 19:14:05 +10:00
  • 6a9b2b70dc fix: use full path to schtasks.exe in deploy post-update start 1.2.33-SAC PTah 2026-05-31 19:03:28 +10:00
  • 2118d4a4a0 fix: hide redundant workstation line in RDP login alerts 1.2.32-SAC PTah 2026-05-31 18:55:11 +10:00
  • 78f241df32 feat: add Diagnose-RdpLoginMonitor.ps1 for post-login troubleshooting PTah 2026-05-31 18:40:10 +10:00
  • e1ae9834a9 feat: single deploy startup, stop mode, notification_body 1.2.31-SAC PTah 2026-05-31 18:11:18 +10:00
  • a74c8df877 feat: lifecycle notifications with telegram_via and settings reload 1.2.30-SAC PTah 2026-05-31 12:25:50 +10:00
  • 2395f536cd feat: notification source line in agent alerts (1.2.29-SAC) PTah 2026-05-31 11:51:55 +10:00
  • b56ad9c7e4 feat: daily report agent version line and per-line active users (1.2.28-SAC) PTah 2026-05-31 11:28:29 +10:00
  • e738d97c9c chore: release 1.2.27-SAC (deploy version compare + docs) PTah 2026-05-31 11:18:58 +10:00
  • 1fe8bd9f7d fix(deploy): version compare for -SAC labels; refresh deploy docs PTah 2026-05-31 11:13:33 +10:00
  • bf04c8865c feat(deploy): auto-add Exchange WinRM/4624 noise settings on role detect (1.2.26-SAC) PTah 2026-05-30 10:36:00 +10:00
  • b010ad01eb fix: filter WinRM noise (HealthMailbox, machine accounts, loopback) PTah 2026-05-30 10:31:30 +10:00
  • 1ff8dd1a95 fix: init NotifyDedupCache under StrictMode (1.2.24-SAC) PTah 2026-05-30 10:26:07 +10:00
  • 724baa6c0a feat: monitor RDS Shadow Control and WinRM inbound (warning alerts, 1.2.23-SAC) PTah 2026-05-30 10:20:57 +10:00