---

 $d='C:\Program Files\Verni-Dexp'
PS C:\WINDOWS\system32> '--- сессии ---'; query session
--- сессии ---
query : Имя "query" не распознано как имя командлета, функции, файла сценария или выполняемой программы. Проверьте прав
ильность написания имени, а также наличие и правильность пути, после чего повторите попытку.
строка:1 знак:19
+ '--- сессии ---'; query session
+                   ~~~~~
    + CategoryInfo          : ObjectNotFound: (query:String) [], CommandNotFoundException
    + FullyQualifiedErrorId : CommandNotFoundException

PS C:\WINDOWS\system32> '--- владелец/права путей ---'; foreach($p in 'C:\Program Files',$d,"$d\agent.exe","$d\Verni.Agent.LockScreen.exe"){ $a=Get-Acl -LiteralPath $p; '{0} | владелец: {1}' -f $p,$a.Owner }
--- владелец/права путей ---
C:\Program Files | владелец: NT SERVICE\TrustedInstaller
C:\Program Files\Verni-Dexp | владелец: BUILTIN\Администраторы
C:\Program Files\Verni-Dexp\agent.exe | владелец: BUILTIN\Администраторы
C:\Program Files\Verni-Dexp\Verni.Agent.LockScreen.exe | владелец: BUILTIN\Администраторы
PS C:\WINDOWS\system32> '--- журнал службы про экран ---'; Get-WinEvent -FilterHashtable @{LogName='Application';ProviderName='VerniAgent'} -MaxEvents 60 -ErrorAction SilentlyContinue | Where-Object { $_.Message -match 'lockscreen|screen|UI' } | Select-Object -First 6 | ForEach-Object { ($_.Message -replace '\s+',' ') }
--- журнал службы про экран ---
PS C:\WINDOWS\system32> '--- последние события агента ---'; Get-Content 'C:\ProgramData\Verni\Agent\logs\events.jsonl' -Tail 12 | ForEach-Object { $_.Substring(0,[Math]::Min(190,$_.Length)) }
--- последние события агента ---
{"event_id":"evt_01M5KP3C1FS712JPVR7HN0W5CP","seq":8,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"TOKEN_APPLIED","occurred_at"
{"event_id":"evt_01M5KP70SDEGB6CWEV5NZY32J4","seq":9,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"WARN_SHOWN","occurred_at":"2
{"event_id":"evt_01M5KP8VCEBFKXFDAB73P4NJ3M","seq":10,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"GRACE_ENTERED","occurred_at
{"event_id":"evt_01M5KP8WBQ19WX05WQZQ34KNZZ","seq":11,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"TAMPER_SUSPECTED","occurred
{"event_id":"evt_01M5KP8Z99K0KT2W1JT2CSNBWK","seq":12,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"TAMPER_SUSPECTED","occurred
{"event_id":"evt_01M5KP945H7RZEMRZBRTQBNP45","seq":13,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"TAMPER_SUSPECTED","occurred
{"event_id":"evt_01M5KP9CYSN837S3GCJKSDR7AM","seq":14,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"TAMPER_SUSPECTED","occurred
{"event_id":"evt_01M5KP9XJ262X6F2ZTVEK6JNSP","seq":15,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"TAMPER_SUSPECTED","occurred
{"event_id":"evt_01M5KPANZM3R1E36242A6JDBZV","seq":16,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"LOCKED_OFFLINE","occurred_a
{"event_id":"evt_01M5KPAXSA2R2X9WXNWGA7J65A","seq":17,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"TAMPER_SUSPECTED","occurred
{"event_id":"evt_01M5KPCSBJPHMVN77S0ZYHXSGG","seq":18,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"TAMPER_SUSPECTED","occurred
{"event_id":"evt_01M5KPEMXTDNCB7G3YT5XSDZJ1","seq":19,"device_public_id":"dev_01M5KNW9X2B5R1CR3S0Q2SWXZN","rental_id":"r_01M5KP2XVFKCPT3YA6DAV5AZZA","event_type":"TAMPER_SUSPECTED","occurred
PS C:\WINDOWS\system32> '--- процесс экрана ---'; Get-Process -Name 'Verni.Agent.LockScreen' -ErrorAction SilentlyContinue | Select-Object Id,SessionId