awatch-rus/AWatch-rus
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(detmir): ship ops, dlp, 1c and mcp updates

Browse Source
This commit is contained in:
igor04091968
2026-05-27 05:56:43 +03:00
parent 033ae810f3
commit 3042bd5042
85 changed files with 12028 additions and 460 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/hayabusa-aw-rus-integration-2026-05-14.md
+7 -1
View File
@@ -1,4 +1,4 @@
# Hayabusa AW-rus Integration 2026-05-14
# Hayabusa / "Форензика Windows логов" AW-rus Integration 2026-05-14
This document defines the bounded integration between Hayabusa DFIR and the normal AW-rus operator path.
@@ -40,6 +40,12 @@ or from Telegram bot:
Default mode is `incident`.
Operator-facing note:
- In Telegram menu the button is named `Форензика Windows логов`.
- Legacy button text `Hayabusa DFIR` may still appear in stale chat keyboards, but the bot must continue to accept it.
- This path remains bounded DFIR follow-up, not a primary runtime health/DLP control.
## What gets linked to a case
Case management stores only bounded metadata: