feat(dlp): capture screenshot on incident

2026-04-27 03:29:19 +03:00
parent 5584144978
commit 63c3d96a19
3 changed files with 207 additions and 2 deletions
@@ -360,6 +360,11 @@ function New-ActivityWatchDeploymentConfig {
        logging = [pscustomobject]@{
            localAgentLogsEnabled = $LocalAgentLogsEnabled
        }
+        incidentCapture = [pscustomobject]@{
+            enabled           = $true
+            screenshotEnabled = $true
+            artifactsRoot     = (Join-Path $StateRoot 'incident-artifacts')
+        }
        sessionEvents = [pscustomobject]@{
            logonEnabled = $LogonMarkerEnabled
            bucketPrefix = 'aw-session-events'