docs: rdp.session.logoff is workstation-only (agent 2.1.12-SAC)

This commit is contained in:
PTah
2026-07-13 17:36:31 +10:00
parent 91bd6afd1f
commit d20517804d
+1 -1
View File
@@ -185,7 +185,7 @@ Idempotency-Key: 550e8400-e29b-41d4-a716-446655440000
| 4624 успех | `rdp.login.success` | info | | 4624 успех | `rdp.login.success` | info |
| 4625 неудача | `rdp.login.failed` | warning | | 4625 неудача | `rdp.login.failed` | warning |
| 4634 / 4647 выход (прямой RDP, **только рабочая станция**) | `rdp.session.logoff` | info | | 4634 / 4647 выход (прямой RDP, **только рабочая станция**) | `rdp.session.logoff` | info |
| RCM **20506** Shadow Control started | `rdp.shadow.control.started` | **warning** | | RCM **20506** Shadow Control started | `rdp.shadow.control.started` | **warning** |
| RCM **20507** Shadow Control stopped | `rdp.shadow.control.stopped` | **warning** | | RCM **20507** Shadow Control stopped | `rdp.shadow.control.stopped` | **warning** |
| RCM **20510** Shadow Control permission | `rdp.shadow.control.permission` | **warning** | | RCM **20510** Shadow Control permission | `rdp.shadow.control.permission` | **warning** |
| WinRM **91** inbound shell (Enter-PSSession) | `winrm.session.started` | **warning** | | WinRM **91** inbound shell (Enter-PSSession) | `winrm.session.started` | **warning** |