feat: persistent Security poll cursor with lookback replay (2.0.36-SAC)

Save last_security_poll.txt between runs and replay Security events up to SecurityEventsLookbackMinutes on startup so slow boot or late agent start does not miss RDP/WinRM-related logons.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
2026-06-16 09:40:15 +10:00
parent d5db38e2ae
commit 1fcd5cb5cf
2 changed files with 52 additions and 3 deletions
+1 -1
View File
@@ -1 +1 @@
2.0.35-SAC
2.0.36-SAC