PapaTramp/RDP-login-monitor
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
49 Commits 1 Branch 0 Tags
938df9bfe0e67ba54abd2b249d7164b0a800915f
Commit Graph

33 Commits

Author SHA1 Message Date
PapaTramp 938df9bfe0 fix: refresh ignore.lst each monitor loop for log/mtime (v1.4.4) 2026-05-04 10:22:03 +10:00
PapaTramp a3a5b45cf8 fix: ignore list startup line use -f format (avoid $kindLabel: parse), bump 1.4.3 2026-05-04 09:42:32 +10:00
PapaTramp 362318707e fix: PowerShell parse error for ignore list line (), bump 1.4.2 2026-05-04 09:40:34 +10:00
PapaTramp 98031a20a1 fix: InstallTasks before DPAPI, deploy elevation and installtasks logs (1.4.1) 2026-05-04 09:38:02 +10:00
PapaTramp b3da911d51 chore: bump version to 1.4.0 2026-05-04 09:33:54 +10:00
PapaTramp 967e470e39 feat: list ignore.lst rules in startup Telegram notice 2026-05-04 09:30:24 +10:00
PapaTramp ace7220752 feat: log ignore.lst reload with rule counts 2026-05-04 09:11:03 +10:00
PapaTramp d3154ceb1b Add ignore.lst filtering for Security logon alerts 
Support user/workstation/IP rules and Telegram-style lines; add ignore.lst.example; bump to 1.3.14.
 2026-05-04 07:55:24 +10:00
PapaTramp 99be51467e Refine RD Gateway 303 semantics and show deploy update timestamp 2026-04-30 16:55:30 +10:00
PapaTramp a37a639be1 Fix RD Gateway 302/303 field mapping (XML + updated Properties layout). 
Bump version to 1.3.12.
 2026-04-30 16:05:21 +10:00
PapaTramp cc8925f88a Start main task immediately after InstallTasks and include script version in startup notification. 
Also bump script/version.txt to 1.3.11 for rollout tracking.
 2026-04-29 16:45:13 +10:00
PapaTramp a20055f9d3 Singleton lock: DeleteOnClose, Ctrl+C propagates, release in finally (v1.3.9) 2026-04-29 16:23:16 +10:00
PapaTramp 313cc189e9 v1.3.5: путь скрипта при Start-Process, диагностика watchdog, DEPLOY.md 2026-04-29 16:13:14 +10:00
PapaTramp e0b0fa3d7e Watchdog: schtasks /Run после установки; DEPLOY/README про задачи и UNC; версия 1.3.4 2026-04-29 16:07:35 +10:00
PapaTramp 80f57c5351 Добавлен доменный деплой (Deploy-LoginMonitor.ps1, version.txt), DEPLOY.md, правки README и комментарий к версии в Login_Monitor.ps1 2026-04-29 15:14:41 +10:00
PapaTramp 306b0762a1 Workstation vs server: ProductType; WKS uses LT10 + RCM 1149; server keeps 2/3/10 (v1.2.0) 2026-04-29 14:30:28 +10:00
PapaTramp 6bc5173236 auditpol: detect RU only from /list, not culture; fall back to EN (Hyper-V); v1.1.3 2026-04-27 10:47:16 +10:00
PapaTramp be0c394ac4 Fix Uc RU category string: add missing 0x0445 in vyhod (auditpol 0x57); v1.1.2 2026-04-27 10:29:10 +10:00
PapaTramp 850781a38d Revert "Use ASCII-only source for Telegram and logs; remove emoji (v1.2.0)" 
This reverts commit b16ebb028b8b28a25e6eed396b14a8cfa1f3295f.
 2026-04-27 10:25:55 +10:00
PapaTramp b032de9d1c Use ASCII-only source for Telegram and logs; remove emoji (v1.2.0) 
Prevents mojibake/parse errors when the .ps1 is saved with wrong encoding after download. RU auditpol subcategory names remain via Uc(); Telegram messages and Write-Log are English.
 2026-04-27 10:24:09 +10:00
PapaTramp 4a4a736eb9 Harden auditpol block: build RU category strings via Uc, English log lines, bump to 1.1.1 
Avoids mojibake/parse errors when the script is downloaded with broken UTF-8; keep Windows RU subcategory names as Unicode code points.
 2026-04-27 10:19:09 +10:00
PapaTramp 383ffb0bf8 Add script version to startup log and admin error 2026-04-27 10:07:23 +10:00
PapaTramp 3d03d905a1 Fix scheduling checks and harden Telegram message formatting. 
Correct daily rotation/report trigger logic to run after the configured slot once per period, avoid duplicate stop notifications on fatal errors, and HTML-escape dynamic Telegram fields to prevent markup breakage.
 2026-04-27 10:01:42 +10:00
PapaTramp 0dce7e7017 Fix daily report: force array for unique users (PS 5.1 Count on scalar) 2026-04-13 11:12:44 +10:00
PapaTramp 9f680dfd89 Telegram Security events: show log server vs workstation (4624/4625) 2026-04-13 10:59:02 +10:00
PapaTramp 685ef5260a Clarify startup Telegram: Gateway targets internal PCs; exclude Gateway-only from RDS host line 2026-04-13 10:53:10 +10:00
PapaTramp 2826e3f9cd Telegram startup: mention RDS and RD Gateway when applicable 2026-04-13 10:49:30 +10:00
PapaTramp 848381e098 Use UTF-8 BOM for logs; document FAR encoding 2026-04-13 10:33:11 +10:00
PapaTramp 65469cf1d2 Improve auditpol parsing for RU logon/logoff category output 2026-04-11 22:14:31 +10:00
PapaTramp 0c9faece92 Fix auditpol localization (RU logon subcategory) and reduce noise 2026-04-11 21:57:16 +10:00
PapaTramp d0171daf8e Fix auditpol for RU subcategory and safer stderr handling 2026-04-11 21:48:49 +10:00
PapaTramp 16baf12094 Update scripts 2026-04-11 21:23:34 +10:00
PapaTramp 21ad87d08d Add login monitor, watchdog and Task Scheduler docs 2026-04-09 16:36:27 +10:00