 igor04091968
|
4da6e68b96
|
feat(1c): add manual company registry overrides
|
2026-05-22 11:41:14 +03:00 |
|
|
igor04091968
|
8993fbf0be
|
feat(1c): normalize company registry aliases
|
2026-05-22 11:29:40 +03:00 |
|
|
igor04091968
|
2e682ec0c3
|
feat(1c): ingest company registry workbook
|
2026-05-22 11:14:31 +03:00 |
|
|
igor04091968
|
5c4966f1ff
|
fix(1c): harden company telemetry rollout
|
2026-05-22 11:01:33 +03:00 |
|
|
igor04091968
|
243edccdd3
|
fix(1c): deploy company api and schema updates
|
2026-05-22 10:47:57 +03:00 |
|
|
igor04091968
|
02e896b05a
|
feat(1c): add read-only companies export layer
|
2026-05-22 10:46:06 +03:00 |
|
|
igor04091968
|
31fe43f4bc
|
docs(1c): clarify company activity forecasting semantics
|
2026-05-22 10:33:42 +03:00 |
|
|
igor04091968
|
1ca43398a4
|
feat(1c): derive company activity from file-base telemetry
|
2026-05-22 10:25:09 +03:00 |
|
|
igor04091968
|
f7114bde03
|
feat(1c): add company intelligence forecasting layer
|
2026-05-22 10:11:53 +03:00 |
|
|
igor04091968
|
da58d682c1
|
fix(grafana): make file-1c dashboards live by default
|
2026-05-22 09:48:28 +03:00 |
|
|
igor04091968
|
172d113536
|
docs(1c): add production deployment guide
|
2026-05-22 09:06:39 +03:00 |
|
|
igor04091968
|
1e23d5acb6
|
fix(1c): preserve file upload task principal
|
2026-05-22 08:34:22 +03:00 |
|
|
igor04091968
|
0d4300dfaf
|
fix(1c): harden live ingestion path
|
2026-05-22 08:17:42 +03:00 |
|
|
igor04091968
|
5c6c23ba0f
|
feat(1c): automate live file telemetry ingestion
|
2026-05-22 08:09:00 +03:00 |
|
|
igor04091968
|
41f7a869e5
|
feat(1c): make file dashboards live and provisioned
|
2026-05-22 00:36:54 +03:00 |
|
|
igor04091968
|
04b45ecf03
|
feat(1c): add file-based analytics stack scaffold
|
2026-05-21 23:34:55 +03:00 |
|
|
igor04091968
|
b420104f1f
|
feat(alerts): enable telegram and improve operator text
|
2026-05-21 22:41:15 +03:00 |
|
|
igor04091968
|
0c88b519ee
|
feat(hayabusa): add auto-case scoring and 6h automation
|
2026-05-21 20:47:49 +03:00 |
|
|
igor04091968
|
4e4898828b
|
fix(hayabusa): close windows direct-upload path
|
2026-05-21 19:15:30 +03:00 |
|
|
igor04091968
|
712fccb630
|
feat(hayabusa): automate detached server-side processing
|
2026-05-21 17:52:01 +03:00 |
|
|
igor04091968
|
c0b9dad534
|
fix(hayabusa): normalize zip extraction
|
2026-05-21 16:37:31 +03:00 |
|
|
igor04091968
|
dc2240d635
|
fix(hayabusa): close phase17 live production validation
|
2026-05-21 16:02:23 +03:00 |
|
|
igor04091968
|
1b77bd6a47
|
docs(history): add sanitized codex history
|
2026-05-21 15:39:46 +03:00 |
|
|
igor04091968
|
63f00587a6
|
docs(runbook): add phase17 hayabusa validation path
|
2026-05-21 15:24:24 +03:00 |
|
|
igor04091968
|
99143b108b
|
feat(aw-rus): sync deploy stack, install kit, and health checks
|
2026-05-21 15:16:23 +03:00 |
|
|
igor04091968
|
77e073c20c
|
docs(presentation): refresh AW-rus DLP review screenshot
|
2026-05-15 09:56:15 +03:00 |
|
|
igor04091968
|
9b22f6f3fb
|
docs(presentation): add per-user worktime report screenshot
|
2026-05-15 09:52:01 +03:00 |
|
|
igor04091968
|
4f11094081
|
fix(grafana): make DLP overview use live influx data
|
2026-05-15 09:45:13 +03:00 |
|
|
igor04091968
|
25c3ac3d2d
|
docs(presentation): refresh DLP overview screenshot
|
2026-05-15 09:37:33 +03:00 |
|
|
igor04091968
|
4fb1c9335e
|
docs(grafana): add dashboard import playbook and presentation assets
|
2026-05-15 09:20:02 +03:00 |
|
|
igor04091968
|
9927cdb195
|
hardening: strengthen deploy and validation gates
|
2026-05-15 08:07:18 +03:00 |
|
|
igor04091968
|
15941e48cb
|
docs(sales): add russian sales overview and switch calendar day start
|
2026-05-15 07:16:24 +03:00 |
|
|
igor04091968
|
6620d52f6c
|
feat(grafana): russify dlp dashboard labels
|
2026-05-15 06:45:43 +03:00 |
|
|
igor04091968
|
ab0ee7d49d
|
fix(windows): capture localized admin rdp activity
|
2026-05-15 04:50:33 +03:00 |
|
|
igor04091968
|
45f990e838
|
feat(grafana): add management infosec dashboard
|
2026-05-15 04:03:37 +03:00 |
|
|
igor04091968
|
93a3169203
|
feat(dlp): add infosec grafana dashboard
|
2026-05-15 02:22:48 +03:00 |
|
|
igor04091968
|
97b458528c
|
fix(grafana): simplify RDP dashboard labels
|
2026-05-15 01:52:25 +03:00 |
|
|
igor04091968
|
174d65181b
|
feat(grafana): redesign RDP dashboard for management
|
2026-05-15 01:38:48 +03:00 |
|
|
igor04091968
|
873e43fb2e
|
feat(worktime): publish RDP activity to Grafana
|
2026-05-15 01:23:23 +03:00 |
|
|
igor04091968
|
22de305c8a
|
feat(worktime): localize rdp worktime report
|
2026-05-15 00:46:36 +03:00 |
|
|
igor04091968
|
0eaaf82432
|
feat(worktime): improve rdp report operator view
|
2026-05-15 00:42:51 +03:00 |
|
|
igor04091968
|
6c41717ef9
|
fix(worktime): restore real per-user RDP report pipeline
|
2026-05-15 00:37:15 +03:00 |
|
|
igor04091968
|
1399eaf605
|
fix(webui): restore resilient aw-rus ui patching
|
2026-05-14 23:14:31 +03:00 |
|
|
igor04091968
|
0098abe426
|
fix(dlp): block self-test case creation
|
2026-05-14 20:49:00 +03:00 |
|
|
igor04091968
|
76d1377736
|
fix(activity): restore real window watchers and isolate rdp bridge
|
2026-05-14 20:02:46 +03:00 |
|
|
igor04091968
|
59e93c1c69
|
fix(windows): restore fileops collector freshness
|
2026-05-14 15:46:03 +03:00 |
|
|
igor04091968
|
0cce6fd08e
|
feat(dfir): add hayabusa forensic workflow integration
|
2026-05-14 15:04:07 +03:00 |
|
|
igor04091968
|
563bd910d1
|
fix(webui): allow case management fetch in CSP
|
2026-05-13 23:20:59 +03:00 |
|
|
igor04091968
|
91c3b46f16
|
fix(ops): sync verified production baseline for AW-Rus DLP
|
2026-05-13 22:50:42 +03:00 |
|
|
igor04091968
|
22aadd5c03
|
fix(bot): align AW-Rus worktime check with idle RDP state
|
2026-05-13 08:47:53 +03:00 |
|
|
igor04091968
|
f6ee903b10
|
fix(worktime): isolate global session collector and reset RDP bridge flow
|
2026-05-13 08:18:47 +03:00 |
|
|
igor04091968
|
b69f4d83cc
|
docs(security): add implemented DLP functional profile for infosec
|
2026-05-13 07:35:22 +03:00 |
|
|
igor04091968
|
eb09251118
|
DLP
|
2026-05-13 07:22:27 +03:00 |
|
|
igor04091968
|
2e5242f5ba
|
feat(dlp): add dedicated health check and grafana dashboard
|
2026-05-13 07:08:23 +03:00 |
|
|
igor04091968
|
6ebf0ac67e
|
feat(dlp): add server-side analyzer, evidence chain, compliance scheduler, and syslog forwarder
|
2026-05-13 04:54:08 +03:00 |
|
|
igor04091968
|
0f1b82233a
|
fix(webui): restore DLP overlay with recursion fail-safe guard
|
2026-05-13 03:49:44 +03:00 |
|
|
igor04091968
|
14f36f502d
|
fix(webui): disable DLP bucket overlay in safe-mode to stop recursion
|
2026-05-13 03:46:34 +03:00 |
|
|
igor04091968
|
068c5a8b0b
|
fix(webui): normalize unknown host refs in category-builder hash/storage
|
2026-05-13 03:41:17 +03:00 |
|
|
igor04091968
|
9153d85d8e
|
fix(webui): harden category-builder unknown bucket query rewrite
|
2026-05-13 03:37:01 +03:00 |
|
|
igor04091968
|
070a8f8f7e
|
feat(dlp): add compliance reporting scheduler and admin CLI
|
2026-05-13 03:31:40 +03:00 |
|
|
igor04091968
|
28a4dae67f
|
feat(dlp): implement case management service and DLP Review integration
|
2026-05-13 03:08:53 +03:00 |
|
|
igor04091968
|
bc44052391
|
fix(health): treat stale file-operations buckets as warning by default
|
2026-05-13 02:35:59 +03:00 |
|
|
igor04091968
|
fd2e9ac59d
|
feat(dlp): implement SIEM/SOAR integrations (CEF, webhook, syslog, systemd timers)
|
2026-05-13 02:30:52 +03:00 |
|
|
igor04091968
|
067457198d
|
fix(webui): avoid category-builder crash on aw-watcher-window_unknown buckets
|
2026-05-13 02:10:04 +03:00 |
|
|
igor04091968
|
8619c14735
|
fix(deploy): make AW DB merge idempotent and non-fatal on name-unique conflicts
|
2026-05-13 02:04:28 +03:00 |
|
|
igor04091968
|
0bc0fe7d78
|
fix(webui): rewrite unknown watcher buckets for all query routes
|
2026-05-12 16:57:03 +03:00 |
|
|
igor04091968
|
4e99100e6c
|
fix(worktime): add API self-heal and bot worktime remediation deploy vars
|
2026-05-12 16:48:30 +03:00 |
|
|
igor04091968
|
bfa7c5bff2
|
fix(worktime): normalize bridge durations and tighten autoheal backfill window
|
2026-05-12 06:06:14 +03:00 |
|
|
igor04091968
|
64158e97a4
|
feat(worktime): add automatic self-heal timer for zero-activity regressions
|
2026-05-12 06:01:07 +03:00 |
|
|
igor04091968
|
012bfb266f
|
fix(worktime): compute non-zero bridge durations from timestamp deltas
|
2026-05-12 05:25:14 +03:00 |
|
|
igor04091968
|
f180e2c3dc
|
feat(ops): add diagnostics and manual restart script for AW stack
|
2026-05-12 05:19:37 +03:00 |
|
|
igor04091968
|
c624db5dd7
|
feat(dlp-policy): add approval workflow, full audit trail, and CRUD documentation
|
2026-05-12 01:11:01 +03:00 |
|
|
igor04091968
|
518c445157
|
feat(dlp-policy): add agent heartbeat/desired refresh channel for push-pull policy sync
|
2026-05-12 01:01:08 +03:00 |
|
|
igor04091968
|
d812a8bb80
|
fix(dlp): enforce server policy mode and preserve policy-engine settings in hardening
|
2026-05-12 00:07:05 +03:00 |
|
|
igor04091968
|
b213552d9d
|
feat(dlp): add enterprise phase scaffolds (policy role, content analysis, siem, case, compliance, cli)
|
2026-05-11 23:18:20 +03:00 |
|
|
igor04091968
|
8be0de1c85
|
feat(ansible): add post-deploy aw-health-check gate
|
2026-05-11 22:57:57 +03:00 |
|
|
igor04091968
|
9342e8b907
|
feat(ops): extend aw health check with dlp transport freshness
|
2026-05-11 22:36:52 +03:00 |
|
|
igor04091968
|
5d7137379c
|
docs(runbook): add deterministic WAL failover test for windows collectors
|
2026-05-11 22:32:58 +03:00 |
|
|
igor04091968
|
544304765f
|
feat(dlp): add WAL transport and collector health telemetry
|
2026-05-11 21:57:23 +03:00 |
|
|
igor04091968
|
e0561bf865
|
fix(windows): disable outlook popup and enforce smtp-only email monitoring
|
2026-05-11 20:46:39 +03:00 |
|
|
igor04091968
|
24dd5ae2b4
|
fix(worktime): add fallback heartbeat when query user returns no sessions
|
2026-05-10 10:59:21 +03:00 |
|
|
igor04091968
|
4b5c75bdbb
|
feat(dlp): deploy hayabusa IOC refresh on aw-server with post-deploy checks
|
2026-05-10 03:13:28 +03:00 |
|
|
igor04091968
|
c43f9b8708
|
feat(dlp): add hayabusa sigma IOC extraction pipeline
|
2026-05-09 17:02:31 +03:00 |
|
|
igor04091968
|
249ba67511
|
fix(ansible): align validation report dir defaults across windows playbooks
|
2026-05-09 13:07:27 +03:00 |
|
|
igor04091968
|
ce428fb5f8
|
fix(worktime-bridge): do not let active=false mask unknown-session fallback
|
2026-05-09 12:31:16 +03:00 |
|
|
igor04091968
|
2bf667fccc
|
fix(worktime-bridge): treat unknown non-system RDP sessions as active
|
2026-05-09 12:29:42 +03:00 |
|
|
igor04091968
|
380983b546
|
fix(worktime-api): count unknown RDP sessions with valid user/session as active
|
2026-05-09 12:28:37 +03:00 |
|
|
igor04091968
|
6ab29a9590
|
fix(worktime): harden query-user parsing and skip unknown fallback
|
2026-05-09 12:24:52 +03:00 |
|
|
igor04091968
|
f22cd27e31
|
fix(ansible): harden WinRM deploy wrapper with md4+retry
|
2026-05-09 11:00:59 +03:00 |
|
|
igor04091968
|
c9df042d96
|
tools(ansible): add no-proxy wrapper for WinRM deploy
|
2026-05-09 10:13:58 +03:00 |
|
|
igor04091968
|
aa0ccc4ecf
|
fix(ansible): run smoke-check on controller + per-user validation dir
|
2026-05-09 09:42:36 +03:00 |
|
|
igor04091968
|
2997e7430a
|
fix(ansible): always enable launch tasks + validate window bucket
|
2026-05-09 08:48:05 +03:00 |
|
|
igor04091968
|
7a320d7862
|
fix(windows): stabilize standalone agent + DLP/worktime collectors
|
2026-05-09 08:29:18 +03:00 |
|
|
igor04091968
|
5ddceb4dc3
|
chore: добавить артефакты анализа кода в .gitignore
|
2026-05-09 08:29:18 +03:00 |
|
|
igor04091968
|
230a9c6936
|
fix(windows): harden worktime session collector encoding and query parsing
|
2026-05-08 10:54:18 +03:00 |
|
|
igor04091968
|
6a36febfeb
|
docs: capture todo - deploy standalone agent on SHARKON2025
|
2026-05-08 08:15:53 +03:00 |
|
|
igor04091968
|
e80272a55f
|
docs(installer): document standalone service mode and minimal host/port setup
|
2026-05-08 00:44:48 +03:00 |
|
|
igor04091968
|
1c3d7896cd
|
feat(installer): add standalone Windows service deployment for DLP agent
|
2026-05-08 00:41:00 +03:00 |
|
|
igor04091968
|
211a6a6eac
|
fix(windows-deploy): enforce awHostname override and safe single-instance collector restart
|
2026-05-08 00:41:00 +03:00 |
|
|
igor04091968
|
6f5e5eb751
|
Revert "merge: apply windows standalone service installer and awHostname hardening"
This reverts commit e643576aa9, reversing
changes made to 669501f20a.
|
2026-05-08 00:41:00 +03:00 |
|