PTah 91be282ec6 feat: close rdp.login.success on rdp.session.logoff (v0.5.12) ...

Ingest correlates direct RDP logoff with open login events on the same host and user. Terminate-session treats missing qwinsta as already logged off.

2026-07-13 17:10:24 +10:00

..

event-schema-v1.json

feat: close rdp.login.success on rdp.session.logoff (v0.5.12)

2026-07-13 17:10:24 +10:00