Skip to content

v2.0.1 Release Notes

Released: April 2026
Theme: Detection Quality + Event Forensics

What's New

Event Screenshot Capture ⭐

When a security event fires, ScreenStop can now capture a screenshot of the actual screen content at the moment of detection — before the blur overlay activates.

The screenshot is combined with the camera frame into a single stacked image, giving administrators a complete picture of both who was detected and what data was visible.

How to enable:
Go to Departments → Audit & Capture Policy → Add Screen Capture to Detection Images.

This setting is off by default. Enable Show Detection Images in Events first — screen capture is additive.

Privacy

Screen capture records whatever is on the screen. Enable only where your data retention policy permits and employees have been informed.

Email Alerts & SIEM Integration

Threshold-based alerting is now live under Admin → Notifications.

  • Email (SMTP): Configure your mail server and recipient list. Alerts fire when a detection type exceeds a daily threshold — per station or globally across the fleet.
  • SIEM / CEF Syslog: Forward events to any CEF-compatible SIEM (Splunk, QRadar, ArcSight) over UDP or TCP.
  • Thresholds: Set per-event-type daily limits independently for each detection type.

See Alerts & Notifications for configuration details.

Unattended Event Filter

A new dashboard setting controls whether unattended screen events are stored in the event feed.

Unattended events fire frequently during normal use (any time the user steps away). This filter keeps the event feed clean without losing data from other detection types.

To configure: Admin → Notifications → Thresholds → Unattended Events.

Bug Fixes

Camera Disconnect Recovery (#42)

Previously, a camera read failure crashed the daemon immediately. The daemon now:

  1. Writes a camera_error status — the menu icon turns red
  2. Retries camera reconnect every 5 seconds for 30 seconds
  3. If reconnect fails, marks the station offline on the dashboard

Administrators can see the camera_error event in the event feed and respond accordingly.

Debug Mode Frame Streaming (#68)

DEBUG_MODE now always streams camera frames to the dashboard regardless of the SAVE_DETECTED_IMAGES setting. Previously, frames were not sent when SAVE_DETECTED_IMAGES = false even if DEBUG_MODE = true.

Platform Support

Mac Windows
Tier 0 — Health Check ✅ ✅
Tier 1 — Detection Pipeline ✅ ✅
Tier 2 — Dashboard Integration ✅ ✅
GUI Manual Test ✅ ✅