docs: rdp.session.logoff is workstation-only (agent 2.1.12-SAC)
This commit is contained in:
@@ -185,7 +185,7 @@ Idempotency-Key: 550e8400-e29b-41d4-a716-446655440000
|
|||||||
| 4624 успех | `rdp.login.success` | info |
|
| 4624 успех | `rdp.login.success` | info |
|
||||||
| 4625 неудача | `rdp.login.failed` | warning |
|
| 4625 неудача | `rdp.login.failed` | warning |
|
||||||
| 4634 / 4647 выход (прямой RDP, **только рабочая станция**) | `rdp.session.logoff` | info |
|
| 4634 / 4647 выход (прямой RDP, **только рабочая станция**) | `rdp.session.logoff` | info |
|
||||||
| RCM **20506** Shadow Control started | `rdp.shadow.control.started` | **warning** |
|
| RCM **20506** Shadow Control started | `rdp.shadow.control.started` | **warning** |
|
||||||
| RCM **20507** Shadow Control stopped | `rdp.shadow.control.stopped` | **warning** |
|
| RCM **20507** Shadow Control stopped | `rdp.shadow.control.stopped` | **warning** |
|
||||||
| RCM **20510** Shadow Control permission | `rdp.shadow.control.permission` | **warning** |
|
| RCM **20510** Shadow Control permission | `rdp.shadow.control.permission` | **warning** |
|
||||||
| WinRM **91** inbound shell (Enter-PSSession) | `winrm.session.started` | **warning** |
|
| WinRM **91** inbound shell (Enter-PSSession) | `winrm.session.started` | **warning** |
|
||||||
|
|||||||
Reference in New Issue
Block a user