v1.20.2
WinSentinel v1.20.2
This ships the v1.20.0 payload — the ~110-commit hardening batch — as the first release of this line to actually reach NuGet.
What's in this line
- RemoteAccess hardening: RDP / WinRM checks and fixes tightened.
- Microsoft Defender coverage: Attack Surface Reduction (ASR), Controlled Folder Access (CFA), and PUA protection checks.
- Parser hardening across the check pipeline for more robust input handling.
- Dead "Fix" button repairs — several checks whose remediation button was a no-op now actually apply their fix.
- LLMNR FixCommand fix — the LLMNR remediation now runs the correct command.
- Scope reduction: the Pro fleet feature was removed from the OSS core, so this build is single-machine only.
Why v1.20.2 (and not v1.20.0 / v1.20.1)
v1.20.0 and v1.20.1 were tagged but never published to NuGet: the release pipeline re-ran the full test suite as a hard publish gate and tripped on environment-flaky tests (registry / async-timing) on the hosted runners. That redundant gate has been removed — publishing is now build → pack → push, with CI remaining the test gate — so v1.20.2 is the first release of this line to actually publish to NuGet. It supersedes v1.20.0 and v1.20.1, which stay as-is.
Full Changelog: v1.20.1...v1.20.2