feat(dlp): add enterprise phase scaffolds (policy role, content analysis, siem, case, compliance, cli)

2026-05-11 23:18:20 +03:00
parent 8be0de1c85
commit b213552d9d
19 changed files with 454 additions and 0 deletions
@@ -0,0 +1,44 @@
+param(
+  [Parameter(Mandatory = $true)][string]$ServerHost,
+  [int]$ServerPort = 5600,
+  [string]$InstallRoot = "C:\ProgramData\AWatch-rus"
+)
+
+$ErrorActionPreference = "Stop"
+
+New-Item -ItemType Directory -Path $InstallRoot -Force | Out-Null
+New-Item -ItemType Directory -Path (Join-Path $InstallRoot "logs") -Force | Out-Null
+
+$configPath = Join-Path $InstallRoot "deployment-config.json"
+$policyPath = Join-Path $InstallRoot "dlp-policy.json"
+
+$cfg = @{
+  server = @{
+    host = $ServerHost
+    port = $ServerPort
+    apiBase = "http://$ServerHost`:$ServerPort/api/0"
+  }
+  paths = @{
+    logsRoot = (Join-Path $InstallRoot "logs")
+  }
+  dlp = @{
+    policyMode = "server"
+  }
+  localAgentLogsEnabled = $true
+}
+$cfg | ConvertTo-Json -Depth 8 | Set-Content -Path $configPath -Encoding UTF8
+
+if (-not (Test-Path $policyPath)) {
+  @{
+    version = 1
+    defaults = @{
+      enabled = $true
+      action = "log"
+      severity = "low"
+      cooldownSeconds = 300
+    }
+    rules = @()
+  } | ConvertTo-Json -Depth 8 | Set-Content -Path $policyPath -Encoding UTF8
+}
+
+Write-Host "DLP client config written: $configPath"