feat: SAC support smb.admin_share.access events from RDP agent

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-04 10:14:14 +10:00
parent d324e41eba
commit 57793d24ba
6 changed files with 35 additions and 3 deletions
@@ -98,6 +98,7 @@
        "rdp.shadow.control.stopped",
        "rdp.shadow.control.permission",
        "winrm.session.started",
+        "smb.admin_share.access",
        "rdg.connection.success",
        "rdg.connection.disconnected",
        "rdg.connection.failed",