igor04091968
4fb1c9335e
docs(grafana): add dashboard import playbook and presentation assets
2026-05-15 09:20:02 +03:00
igor04091968
9927cdb195
hardening: strengthen deploy and validation gates
2026-05-15 08:07:18 +03:00
igor04091968
15941e48cb
docs(sales): add russian sales overview and switch calendar day start
2026-05-15 07:16:24 +03:00
igor04091968
ab0ee7d49d
fix(windows): capture localized admin rdp activity
2026-05-15 04:50:33 +03:00
igor04091968
93a3169203
feat(dlp): add infosec grafana dashboard
2026-05-15 02:22:48 +03:00
igor04091968
873e43fb2e
feat(worktime): publish RDP activity to Grafana
2026-05-15 01:23:23 +03:00
igor04091968
6c41717ef9
fix(worktime): restore real per-user RDP report pipeline
2026-05-15 00:37:15 +03:00
igor04091968
1399eaf605
fix(webui): restore resilient aw-rus ui patching
2026-05-14 23:14:31 +03:00
igor04091968
0098abe426
fix(dlp): block self-test case creation
2026-05-14 20:49:00 +03:00
igor04091968
76d1377736
fix(activity): restore real window watchers and isolate rdp bridge
2026-05-14 20:02:46 +03:00
igor04091968
0cce6fd08e
feat(dfir): add hayabusa forensic workflow integration
2026-05-14 15:04:07 +03:00
igor04091968
91c3b46f16
fix(ops): sync verified production baseline for AW-Rus DLP
2026-05-13 22:50:42 +03:00
igor04091968
22aadd5c03
fix(bot): align AW-Rus worktime check with idle RDP state
2026-05-13 08:47:53 +03:00
igor04091968
f6ee903b10
fix(worktime): isolate global session collector and reset RDP bridge flow
2026-05-13 08:18:47 +03:00
igor04091968
eb09251118
DLP
2026-05-13 07:22:27 +03:00
igor04091968
2e5242f5ba
feat(dlp): add dedicated health check and grafana dashboard
2026-05-13 07:08:23 +03:00
igor04091968
6ebf0ac67e
feat(dlp): add server-side analyzer, evidence chain, compliance scheduler, and syslog forwarder
2026-05-13 04:54:08 +03:00
igor04091968
070a8f8f7e
feat(dlp): add compliance reporting scheduler and admin CLI
2026-05-13 03:31:40 +03:00
igor04091968
28a4dae67f
feat(dlp): implement case management service and DLP Review integration
2026-05-13 03:08:53 +03:00
igor04091968
fd2e9ac59d
feat(dlp): implement SIEM/SOAR integrations (CEF, webhook, syslog, systemd timers)
2026-05-13 02:30:52 +03:00
igor04091968
8619c14735
fix(deploy): make AW DB merge idempotent and non-fatal on name-unique conflicts
2026-05-13 02:04:28 +03:00
igor04091968
4e99100e6c
fix(worktime): add API self-heal and bot worktime remediation deploy vars
2026-05-12 16:48:30 +03:00
igor04091968
64158e97a4
feat(worktime): add automatic self-heal timer for zero-activity regressions
2026-05-12 06:01:07 +03:00
igor04091968
d812a8bb80
fix(dlp): enforce server policy mode and preserve policy-engine settings in hardening
2026-05-12 00:07:05 +03:00
igor04091968
b213552d9d
feat(dlp): add enterprise phase scaffolds (policy role, content analysis, siem, case, compliance, cli)
2026-05-11 23:18:20 +03:00
igor04091968
8be0de1c85
feat(ansible): add post-deploy aw-health-check gate
2026-05-11 22:57:57 +03:00
igor04091968
e0561bf865
fix(windows): disable outlook popup and enforce smtp-only email monitoring
2026-05-11 20:46:39 +03:00
igor04091968
4b5c75bdbb
feat(dlp): deploy hayabusa IOC refresh on aw-server with post-deploy checks
2026-05-10 03:13:28 +03:00
igor04091968
249ba67511
fix(ansible): align validation report dir defaults across windows playbooks
2026-05-09 13:07:27 +03:00
igor04091968
f22cd27e31
fix(ansible): harden WinRM deploy wrapper with md4+retry
2026-05-09 11:00:59 +03:00
igor04091968
c9df042d96
tools(ansible): add no-proxy wrapper for WinRM deploy
2026-05-09 10:13:58 +03:00
igor04091968
aa0ccc4ecf
fix(ansible): run smoke-check on controller + per-user validation dir
2026-05-09 09:42:36 +03:00
igor04091968
2997e7430a
fix(ansible): always enable launch tasks + validate window bucket
2026-05-09 08:48:05 +03:00
igor04091968
211a6a6eac
fix(windows-deploy): enforce awHostname override and safe single-instance collector restart
2026-05-08 00:41:00 +03:00
igor04091968
6f5e5eb751
Revert "merge: apply windows standalone service installer and awHostname hardening"
...
This reverts commit e643576aa9 , reversing
changes made to 669501f20a .
2026-05-08 00:41:00 +03:00
igor04091968
693e6832a6
fix(windows-deploy): enforce awHostname override and safe single-instance collector restart
2026-05-08 00:34:52 +03:00
igor04091968
38107b3c84
ansible: remove per-host passwords from inventory\n\nCo-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-05-07 23:37:47 +03:00
igor04091968
8b92b1136f
chore: merge main into PR #15
2026-05-07 07:34:36 +03:00
igor04091968
8849354dda
fix(worktime): codify ui-bridge in ansible and install flow
2026-05-07 07:20:14 +03:00
igor04091968
d91a396c00
feat(webui): add HTML and panel view for worktime reports
2026-05-07 06:41:42 +03:00
igor04091968
8a91734a27
fix(worktime): use Europe/Moscow day boundary for aw-rus today reports
2026-05-07 06:30:12 +03:00
igor04091968
a6a05b82a9
fix(webui): persist worktime report links to :5610 in ansible/installkit
2026-05-06 23:24:52 +03:00
igor04091968
03fefcc257
fix(deploy): harden windows rollout, validation and installkit payload
2026-05-06 20:14:51 +03:00
igor04091968
9eb02185dd
fix(windows): stabilize AW deploy/validate and watcher launch script
2026-05-06 20:05:43 +03:00
igor04091968 and Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
9e5cb144d4
fix(windows): standardize config paths to AWatch-rus and add bucket hostname filter
...
- Replace default config paths from C:\ProgramData\ActivityWatch to C:\ProgramData\AWatch-rus
in dlp-endpoint-signals-collector.ps1 and email-outbound-collector.ps1
- Add isLikelyClientHost() function to reject IP/localhost as valid hostname
for bucket selection in aw-ru-patch.js
- Add docs/dlp-reliability-roadmap.md and docs/powershell-analysis.md
- Update README.md with links to new documentation
Generated with [Devin](https://cli.devin.ai/docs )
Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-05-04 23:24:49 +03:00
Devin AI and Fashion Lisa
a35a8a51bd
fix(print): detect generic doc names (Печать документа) + integrate email collector into deploy
...
Print document naming:
- Add Test-IsGenericDocumentName() to detect placeholder names like
'Печать документа', 'Print Document', 'Remote Downlevel Document', etc.
- Add Test-NeedsBetterDocumentName() that combines mojibake, generic and
numeric-only checks into a single gate for PrintService event log fallback
- Replace Test-LooksLikeMojibakeQuestionMarks with Test-NeedsBetterDocumentName
in Win32_PrintJob polling and Get-PrintServiceDocumentFallback
Email collector deployment integration:
- Ansible: add email-outbound-collector.ps1 to deploy_aw_windows.yml file list
- Ansible: add aw_windows_email_collector_enabled/mode vars
- InnoSetup: add email-outbound-collector.ps1 to [Files] section
- Common module: add EmailCollectorScript to Copy-ActivityWatchCollectorAssets,
New-ActivityWatchDeploymentConfig, launch-watchers script
- Deploy scripts: pass EmailCollectorScript through pipeline
- Deployment configs: add emailCollectorScript path
- Sync all changes to install-kit copy
Co-Authored-By: Fashion Lisa <igor04091968@gmail.com >
2026-05-04 18:07:14 +00:00
igor04091968
3e565b7a2e
fix: create /root/bootstrap directory before copying files
...
Add ansible.builtin.file task to ensure /root/bootstrap exists
before copying RU patch files to it (prevents first-deploy failure)
2026-05-03 23:08:48 +03:00
igor04091968
3fa15f826d
fix: env file before hotfixes + improved error handling
...
- Move env file creation before apply_webui_ru_patch.sh execution
- Replace ignore_errors with failed_when: false + register + debug output
- Provides visible feedback on hotfix script execution result
2026-05-03 22:56:31 +03:00
igor04091968
08ba731345
fix: apply WebUI hotfixes via apply_webui_ru_patch.sh + filter undefined hostname
...
- Add CATEGORY_HELPER filter for 'undefined' in addition to 'unknown'
- Add copy of apply_webui_ru_patch.sh to /opt/activitywatch/aw-server/
- Add task to run apply_webui_ru_patch.sh for Trends/Timespiral/Category helper hotfixes
- Fix in both deploy_aw_server.yml (ansible and install-kit)
2026-05-03 22:52:39 +03:00
igor04091968
3971c459ef
Feat: implement automated DLP incident aggregation on server (timer + service)
2026-05-03 01:50:17 +03:00