PTah ae86cb3ea7 feat: persistent Security poll cursor with lookback replay (2.0.36-SAC) ...

Save last_security_poll.txt between runs and replay Security events up to SecurityEventsLookbackMinutes on startup so slow boot or late agent start does not miss RDP/WinRM-related logons.

Co-authored-by: Cursor <cursoragent@cursor.com>

2026-06-16 11:37:48 +10:00

..

tests

feat: persistent Security poll cursor with lookback replay (2.0.36-SAC)

2026-06-16 11:37:48 +10:00

Push-KalinamallOnly.ps1

fix: deploy TaskQuery script scope and internal autotests (2.0.32-SAC)

2026-06-11 15:15:42 +10:00

Run-RdpMonitorTests.ps1

feat: persistent Security poll cursor with lookback replay (2.0.36-SAC)

2026-06-16 11:37:48 +10:00

Show-Rdp4624Recent.ps1

fix: dedup 4624 login alerts and log Skip/dedup reasons (1.2.18-SAC)

2026-05-28 15:17:01 +10:00

Test-DeploySyntax.ps1

fix: deploy syncs Sac-Client bundle, SAC dual settings, and ServerDisplayName hint (1.2.20-SAC)

2026-05-29 15:55:16 +10:00

Test-RDGatewayEventInfo.ps1

fix: RD Gateway startup replay, 1226 benign, SAC occurred_at (2.0.14-SAC)

2026-06-03 11:42:03 +10:00

Test-ScriptSyntax.ps1

fix: dedup 4624 login alerts and log Skip/dedup reasons (1.2.18-SAC)

2026-05-28 15:17:01 +10:00