Files
security-alert-center/backend/app/services
PTah e38f62340f feat: close rdp.login.success on rdp.session.logoff (v0.5.12)
Ingest correlates direct RDP logoff with open login events on the same host and user. Terminate-session treats missing qwinsta as already logged off.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-07-13 17:07:04 +10:00
..