Oliver Kieselbach 65651dd599 ANALYZE-ID-004 v1.2.0: pre-logon VPN + Hello-as-symptom self-service guidance ...

From the 3b7ba31f (succeeded) vs gardner/esa (parked) hybrid session comparison:
explanation now covers the cached-credentials/pre-logon-VPN variant and why the
Hello wizard never appearing is downstream of the missing PRT; new remediation
block for VPN machine tunnels, cloud Kerberos trust, explicit Hello disable,
update deferral and pre-provisioning. Links the new docs article.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-17 13:36:10 +02:00

..

analyze

ANALYZE-ID-004 v1.2.0: pre-logon VPN + Hello-as-symptom self-service guidance

2026-08-17 13:36:10 +02:00

dist

ANALYZE-ID-004 v1.2.0: pre-logon VPN + Hello-as-symptom self-service guidance

2026-08-17 13:36:10 +02:00

gather

rules: hybrid user-affinity + never-settled-app detection, dsregcmd on_event snapshot, evidence interpolation fixes

2026-08-14 13:39:16 +02:00

ime-log-patterns

fix(agent): ESP-Apps failure correlation + platform-script stdout/exit contamination

2026-06-22 20:37:44 +02:00

schema

rules: hard-block high-frequency event types as evaluateOn on_event triggers

2026-08-14 16:07:39 +02:00

scripts

web: evaluateOn in the analyze-rule editor + interim-trigger badge

2026-08-14 16:34:56 +02:00

guardrails.json

rules: hard-block high-frequency event types as evaluateOn on_event triggers

2026-08-14 16:07:39 +02:00