PapaTramp/security-alert-center
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
240 Commits 1 Branch 0 Tags
91bd6afd1f30e4ed5c38db0857155cdff9ae3f0c
Commit Graph

31 Commits

Author SHA1 Message Date
PapaTramp 91be282ec6 feat: close rdp.login.success on rdp.session.logoff (v0.5.12) 
Ingest correlates direct RDP logoff with open login events on the same host and user. Terminate-session treats missing qwinsta as already logged off.
 2026-07-13 17:10:24 +10:00
PapaTramp 9e43de6fc1 chore: release SAC 0.5.0 
Bump version, document security hardening in README, add github snapshot
push script with URL/login/IP sanitization for public mirror.
 2026-07-07 19:44:08 +10:00
PapaTramp 6c43b8637e fix: dedupe host_silence problems under concurrent scans (0.4.11) 
Treat acknowledged as active, dedupe by hostname, add PostgreSQL advisory lock and a unique index. Migration closes existing duplicate open problems.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-03 09:05:28 +10:00
PapaTramp 3765d4d476 feat: RDP flap auto-disconnect and hide break button after reconnect (0.4.10) 
Add optional auto logoff of stuck sessions on RDG flap and direct RDP failure. Hide the RDS break button on old flap 302 when the user later reconnects or the workstation session is closed.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-07-02 16:50:03 +10:00
PapaTramp 0601aafd2d fix: hide ????????? after session terminate (0.3.8) 
Persist session_terminated in event details, expose in API, and update Events/Dashboard UI.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:45:33 +10:00
PapaTramp 8b3e43f30d fix: event terminate-session 500 on rdp.login.success (0.3.7) 
Use extract_event_actor_user instead of missing ORM field; map WinRM/SSH errors to HTTP 400.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:37:37 +10:00
PapaTramp 6330f31162 docs: sync README version lines with APP_VERSION 0.3.6 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-24 14:14:43 +10:00
PapaTramp d7bbcc5337 docs: WinRM RDP update flow and SAC 0.20.18 deployment notes 
Обновлены README и руководства по fallback WinRM (git→zip→клиент), SAC_PUBLIC_URL и краткому 502 при деплое.
 2026-06-20 20:03:57 +10:00
PapaTramp fc9d630263 docs: refresh README; allow monitor JWT for RDG qwinsta/logoff (0.20.6) 
Update platform docs for current features; Seaca and web operators with
monitor role can trigger WinRM actions via SAC API.
 2026-06-20 19:02:58 +10:00
PapaTramp df4c93d243 chore: release 0.10.0 (agent control plane phase 1) 
Minor release: RDG flap, qwinsta/logoff queue, dashboard UI, agent poll API.
 2026-06-19 23:42:03 +10:00
PapaTramp 2aec488226 feat: RDG session flap rule, qwinsta/logoff queue and dashboard UI (0.9.13) 
Detect 302→303 within 1–10s, Problem with 30s dedup, rdg_flap flag.
Agent command poll API, admin qwinsta/logoff from Overview. Migration 016.
 2026-06-19 23:34:01 +10:00
PapaTramp b328d32f97 docs: agent control plane concept (v0.9.12) 
Утверждённая концепция v0.7: RDG flap, qwinsta/logoff, обновления
агентов и desired config. Только документация и bump версии — runtime
без изменений.
 2026-06-19 23:25:54 +10:00
PapaTramp 6bff073108 chore(docs): sync repository URLs for kalinamall mirror 2026-06-16 11:41:07 +10:00
PapaTramp 36ccfc9471 chore(docs): GitHub URLs in README/docs, remove .cursor from repo 
Replace git.kalinamall.ru links with github.com/PTah in public docs.
Add Rewrite-GitHostUrls.ps1 and Push-Mirror.ps1 for kalinamall mirror pushes.
Add .cursor/ to .gitignore.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-16 11:37:20 +10:00
PapaTramp 563b836acc feat: Seaca mobile API, enrollment, FCM push and admin UI (0.9.0) 
Adds mobile device registration by admin codes, refresh tokens, push channel
in notification policy, and Settings section for managing Seaca clients.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 13:19:14 +10:00
PapaTramp 86c602cf07 docs: add v0.6 Mobile (Seaca) to roadmap and README 
Links the new Android client repo and documents server-side mobile API work.
 2026-06-10 12:45:52 +10:00
PapaTramp e65daa8c3b chore: sync frontend version.ts with API 0.8.3 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-10 09:11:41 +10:00
PapaTramp 459b2babd1 docs: split README (RU) and README_en (EN) for GitHub 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-05 14:38:53 +10:00
PapaTramp 5d3cda2ab6 docs: expand README highlights (5140 admin share, agent versions) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-04 10:17:11 +10:00
PapaTramp 57793d24ba feat: SAC support smb.admin_share.access events from RDP agent 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-04 10:14:14 +10:00
PapaTramp d324e41eba docs: README highlights list monitored sources (SSH, RDP, WinRM, sudo) 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 16:10:49 +10:00
PapaTramp 1580982d88 fix: rename README screenshots to bust stale CDN/browser cache 
Same user-provided PNGs (no blur); new filenames avoid serving old
Gaussian-blurred assets cached at dashboard.png / events.png paths.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:18:07 +10:00
PapaTramp d8ba864e48 docs: drop redundant note about blurred screenshots in README 
Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:14:33 +10:00
PapaTramp 2d39943020 docs: add sanitized UI screenshots to README (0.7.4) 
Dashboard, events, and problems screenshots with hostnames and IPs blurred.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-03 14:11:14 +10:00
PapaTramp cf5a6f995c docs: update README with current SAC and agent status 
Reflect SAC 0.7.3 capabilities, security hardening highlights, and current RDP monitor integration state.

Co-authored-by: Cursor <cursoragent@cursor.com>
 2026-06-01 13:25:16 +10:00
PapaTramp a4bbc14448 docs: prod status, sac-deploy.sh; update install and deployment guides 2026-05-26 22:03:10 +10:00
PapaTramp bdfc7016e6 feat: phase 1C JWT UI, events/hosts API, Vue frontend 2026-05-26 21:46:34 +10:00
PapaTramp 0c5d2537db docs: подробное руководство по копированию wildcard TLS на сервер 2026-05-26 21:15:38 +10:00
PapaTramp 9203af90d5 docs: native Ubuntu install as primary; systemd and nginx 
- install-ubuntu-24.04-native.md (production) and -docker.md (alternative)

- deploy/systemd/sac-api.service, nginx/sac.conf.example, env.native.example

- deployment, README, INDEX, work-plan, TZ updated
 2026-05-26 20:28:05 +10:00
PapaTramp 69a232d08a feat: backend ingest API, Docker Compose, Ubuntu install guide 
- FastAPI: POST /api/v1/events, GET /health, JSON Schema validation

- PostgreSQL models, Alembic migration, bootstrap API key

- deploy/docker-compose.yml, .env.example

- docs/install-ubuntu-24.04.md, updated work-plan (agents first)
 2026-05-26 20:21:31 +10:00
PapaTramp 4f3adc9429 docs: ТЗ v1.0, планы и схема SAC (фаза 0) 
Security Alert Center — документация без кода приложения.

- TZ, архитектура, интеграция агентов (UseSAC)

- JSON Schema событий v1, deployment Ubuntu 24.04

- План работ, roadmap, multi-root workspace
 2026-05-26 19:54:47 +10:00