Add DLP incident aggregation prototype

2026-05-02 20:55:44 +00:00
parent c97ffe2cbd
commit 5a4064dc0f
4 changed files with 624 additions and 2 deletions
@@ -29,8 +29,8 @@

 - USB/print/clipboard collectors (endpoint signals) — внедрено.
 - Incident pipeline расширен на endpoint события — внедрено.
- File-operation telemetry (create/copy/archive/upload hints) — в backlog.
- Central incident aggregation/export — в backlog.
+- File-operation telemetry (create/delete/rename/archive hints) — прототип внедрён (`windows/file-operations-collector.ps1`).
+- Central incident aggregation/export — прототип внедрён (`scripts/aggregate_dlp_events.py`, `docs/dlp-aggregator.md`).

 ### Phase 3