PapaTramp/security-alert-center
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
242 Commits 1 Branch 0 Tags
d95b93992d810202994b2de8aa40bb816dda0412
Commit Graph

32 Commits

Author SHA1 Message Date
PTah d95b93992d fix: parse Disc qwinsta rows so RDG flap auto-logoff works (0.5.14) 
Empty SESSIONNAME broke session matching; auto-disconnect failed with 'No matching Windows session'.
 2026-07-14 10:32:17 +10:00
PTah 91be282ec6 feat: close rdp.login.success on rdp.session.logoff (v0.5.12) 
Ingest correlates direct RDP logoff with open login events on the same host and user. Terminate-session treats missing qwinsta as already logged off.
 2026-07-13 17:10:24 +10:00
PTah 9e43de6fc1 chore: release SAC 0.5.0 
Bump version, document security hardening in README, add github snapshot
push script with URL/login/IP sanitization for public mirror.
 2026-07-07 19:44:08 +10:00
PTah 6c43b8637e fix: dedupe host_silence problems under concurrent scans (0.4.11) 
Treat acknowledged as active, dedupe by hostname, add PostgreSQL advisory lock and a unique index. Migration closes existing duplicate open problems.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-03 09:05:28 +10:00
PTah 3765d4d476 feat: RDP flap auto-disconnect and hide break button after reconnect (0.4.10) 
Add optional auto logoff of stuck sessions on RDG flap and direct RDP failure. Hide the RDS break button on old flap 302 when the user later reconnects or the workstation session is closed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-02 16:50:03 +10:00
PTah 0601aafd2d fix: hide ????????? after session terminate (0.3.8) 
Persist session_terminated in event details, expose in API, and update Events/Dashboard UI.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:45:33 +10:00
PTah 8b3e43f30d fix: event terminate-session 500 on rdp.login.success (0.3.7) 
Use extract_event_actor_user instead of missing ORM field; map WinRM/SSH errors to HTTP 400.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:37:37 +10:00
PTah 6330f31162 docs: sync README version lines with APP_VERSION 0.3.6 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:14:43 +10:00
PTah d7bbcc5337 docs: WinRM RDP update flow and SAC 0.20.18 deployment notes 
Обновлены README и руководства по fallback WinRM (git→zip→клиент), SAC_PUBLIC_URL и краткому 502 при деплое.
 2026-06-20 20:03:57 +10:00
PTah fc9d630263 docs: refresh README; allow monitor JWT for RDG qwinsta/logoff (0.20.6) 
Update platform docs for current features; Seaca and web operators with
monitor role can trigger WinRM actions via SAC API.
 2026-06-20 19:02:58 +10:00
PTah df4c93d243 chore: release 0.10.0 (agent control plane phase 1) 
Minor release: RDG flap, qwinsta/logoff queue, dashboard UI, agent poll API.
 2026-06-19 23:42:03 +10:00
PTah 2aec488226 feat: RDG session flap rule, qwinsta/logoff queue and dashboard UI (0.9.13) 
Detect 302→303 within 1–10s, Problem with 30s dedup, rdg_flap flag.
Agent command poll API, admin qwinsta/logoff from Overview. Migration 016.
 2026-06-19 23:34:01 +10:00
PTah b328d32f97 docs: agent control plane concept (v0.9.12) 
Утверждённая концепция v0.7: RDG flap, qwinsta/logoff, обновления
агентов и desired config. Только документация и bump версии — runtime
без изменений.
 2026-06-19 23:25:54 +10:00
PTah 6bff073108 chore(docs): sync repository URLs for kalinamall mirror 2026-06-16 11:41:07 +10:00
PTah 36ccfc9471 chore(docs): GitHub URLs in README/docs, remove .cursor from repo 
Replace git.kalinamall.ru links with github.com/PTah in public docs.
Add Rewrite-GitHostUrls.ps1 and Push-Mirror.ps1 for kalinamall mirror pushes.
Add .cursor/ to .gitignore.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-16 11:37:20 +10:00
PTah 563b836acc feat: Seaca mobile API, enrollment, FCM push and admin UI (0.9.0) 
Adds mobile device registration by admin codes, refresh tokens, push channel
in notification policy, and Settings section for managing Seaca clients.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 13:19:14 +10:00
PTah 86c602cf07 docs: add v0.6 Mobile (Seaca) to roadmap and README 
Links the new Android client repo and documents server-side mobile API work.
 2026-06-10 12:45:52 +10:00
PTah e65daa8c3b chore: sync frontend version.ts with API 0.8.3 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 09:11:41 +10:00
PTah 459b2babd1 docs: split README (RU) and README_en (EN) for GitHub 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 14:38:53 +10:00
PTah 5d3cda2ab6 docs: expand README highlights (5140 admin share, agent versions) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-04 10:17:11 +10:00
PTah 57793d24ba feat: SAC support smb.admin_share.access events from RDP agent 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-04 10:14:14 +10:00
PTah d324e41eba docs: README highlights list monitored sources (SSH, RDP, WinRM, sudo) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 16:10:49 +10:00
PTah 1580982d88 fix: rename README screenshots to bust stale CDN/browser cache 
Same user-provided PNGs (no blur); new filenames avoid serving old
Gaussian-blurred assets cached at dashboard.png / events.png paths.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:18:07 +10:00
PTah d8ba864e48 docs: drop redundant note about blurred screenshots in README 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:14:33 +10:00
PTah 2d39943020 docs: add sanitized UI screenshots to README (0.7.4) 
Dashboard, events, and problems screenshots with hostnames and IPs blurred.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:11:14 +10:00
PTah cf5a6f995c docs: update README with current SAC and agent status 
Reflect SAC 0.7.3 capabilities, security hardening highlights, and current RDP monitor integration state.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 13:25:16 +10:00
PTah a4bbc14448 docs: prod status, sac-deploy.sh; update install and deployment guides 2026-05-26 22:03:10 +10:00
PTah bdfc7016e6 feat: phase 1C JWT UI, events/hosts API, Vue frontend 2026-05-26 21:46:34 +10:00
PTah 0c5d2537db docs: подробное руководство по копированию wildcard TLS на сервер 2026-05-26 21:15:38 +10:00
PTah 9203af90d5 docs: native Ubuntu install as primary; systemd and nginx 
- install-ubuntu-24.04-native.md (production) and -docker.md (alternative)

- deploy/systemd/sac-api.service, nginx/sac.conf.example, env.native.example

- deployment, README, INDEX, work-plan, TZ updated
 2026-05-26 20:28:05 +10:00
PTah 69a232d08a feat: backend ingest API, Docker Compose, Ubuntu install guide 
- FastAPI: POST /api/v1/events, GET /health, JSON Schema validation

- PostgreSQL models, Alembic migration, bootstrap API key

- deploy/docker-compose.yml, .env.example

- docs/install-ubuntu-24.04.md, updated work-plan (agents first)
 2026-05-26 20:21:31 +10:00
PTah 4f3adc9429 docs: ТЗ v1.0, планы и схема SAC (фаза 0) 
Security Alert Center — документация без кода приложения.

- TZ, архитектура, интеграция агентов (UseSAC)

- JSON Schema событий v1, deployment Ubuntu 24.04

- План работ, roadmap, multi-root workspace
 2026-05-26 19:54:47 +10:00