Commit Graph
52 Commits
Author SHA1 Message Date
igor04091968 9c57d6d2ce feat(rust): advance powershell migration 2026-06-06 08:58:46 +03:00
igor04091968 d7616fd9a9 feat(agent): harden rust worktime fallback mode 2026-06-04 11:21:54 +03:00
igor04091968 ff234af701 feat(agent): switch worktime sessions to rust agent 2026-06-04 10:36:19 +03:00
igor04091968 a1801fca5f docs(public): sanitize release materials 2026-06-03 08:52:20 +03:00
igor04091968 19e3682bc8 feat(detmir): add rust-first operations tooling 2026-06-02 17:57:58 +03:00
igor04091968 cc9e4a0669 fix(aw): harden collectors and grafana exports 2026-05-28 10:54:46 +03:00
igor04091968 524ab33f63 fix(activity): restore app-level window stream on rdp host 2026-05-27 11:36:58 +03:00
igor04091968 3042bd5042 feat(detmir): ship ops, dlp, 1c and mcp updates 2026-05-27 05:56:43 +03:00
igor04091968 033ae810f3 fix(windows): rotate deploy archives and hide pfsense menu 2026-05-26 19:01:28 +03:00
igor04091968 6cb1e0a95b fix(rdp): decouple activity view from disconnected sessions 2026-05-22 20:02:47 +03:00
igor04091968 2e682ec0c3 feat(1c): ingest company registry workbook 2026-05-22 11:14:31 +03:00
igor04091968 1e23d5acb6 fix(1c): preserve file upload task principal 2026-05-22 08:34:22 +03:00
igor04091968 5c6c23ba0f feat(1c): automate live file telemetry ingestion 2026-05-22 08:09:00 +03:00
igor04091968 0c88b519ee feat(hayabusa): add auto-case scoring and 6h automation 2026-05-21 20:47:49 +03:00
igor04091968 712fccb630 feat(hayabusa): automate detached server-side processing 2026-05-21 17:52:01 +03:00
igor04091968 99143b108b feat(aw-rus): sync deploy stack, install kit, and health checks 2026-05-21 15:16:23 +03:00
igor04091968 ab0ee7d49d fix(windows): capture localized admin rdp activity 2026-05-15 04:50:33 +03:00
igor04091968 59e93c1c69 fix(windows): restore fileops collector freshness 2026-05-14 15:46:03 +03:00
igor04091968 0cce6fd08e feat(dfir): add hayabusa forensic workflow integration 2026-05-14 15:04:07 +03:00
igor04091968 91c3b46f16 fix(ops): sync verified production baseline for AW-Rus DLP 2026-05-13 22:50:42 +03:00
igor04091968 f6ee903b10 fix(worktime): isolate global session collector and reset RDP bridge flow 2026-05-13 08:18:47 +03:00
igor04091968 544304765f feat(dlp): add WAL transport and collector health telemetry 2026-05-11 21:57:23 +03:00
igor04091968 e0561bf865 fix(windows): disable outlook popup and enforce smtp-only email monitoring 2026-05-11 20:46:39 +03:00
igor04091968 211a6a6eac fix(windows-deploy): enforce awHostname override and safe single-instance collector restart 2026-05-08 00:41:00 +03:00
igor04091968 6f5e5eb751 Revert "merge: apply windows standalone service installer and awHostname hardening"
This reverts commit e643576aa9, reversing
changes made to 669501f20a.
2026-05-08 00:41:00 +03:00
igor04091968 693e6832a6 fix(windows-deploy): enforce awHostname override and safe single-instance collector restart 2026-05-08 00:34:52 +03:00
igor04091968andCopilot e37c3886ba revert(pssa): restore files corrupted by automatic fixes (ActivityWatch.Windows.Common.psm1, email-outbound-collector.ps1, file-operations-collector.ps1)
Restored previous versions for files that were corrupted by the automated PSScriptAnalyzer fixes. Please review and reapply safe fixes manually.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-05-07 18:10:12 +03:00
igor04091968andCopilot 429501d4fe chore(pssa): apply safe PSScriptAnalyzer fixes (BOM, empty catch -> Write-Error, Write-Host -> Write-Output)
Applied automatic, low-risk fixes for PSScriptAnalyzer warnings. Please review changes for behavior-sensitive code.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-05-07 12:50:35 +03:00
igor04091968 8b92b1136f chore: merge main into PR #15 2026-05-07 07:34:36 +03:00
IgorRachkov b2a1a6289c Fix Windows RDP collectors startup 2026-05-06 17:23:47 +03:00
igor04091968andDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 10c22a6c88 fix(windows): add STA parameter for DLP collector and use TEMP for lock files
- Add -STA parameter when launching endpoint-signals collector for clipboard access
- Move launch-watchers lock files from ProgramData to TEMP to avoid permission issues
- This fixes DLP endpoint collector startup in RDP sessions

Generated with [Devin](https://cli.devin.ai/docs)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-05-05 00:55:04 +03:00
Devin AIandFashion Lisa a35a8a51bd fix(print): detect generic doc names (Печать документа) + integrate email collector into deploy
Print document naming:
- Add Test-IsGenericDocumentName() to detect placeholder names like
  'Печать документа', 'Print Document', 'Remote Downlevel Document', etc.
- Add Test-NeedsBetterDocumentName() that combines mojibake, generic and
  numeric-only checks into a single gate for PrintService event log fallback
- Replace Test-LooksLikeMojibakeQuestionMarks with Test-NeedsBetterDocumentName
  in Win32_PrintJob polling and Get-PrintServiceDocumentFallback

Email collector deployment integration:
- Ansible: add email-outbound-collector.ps1 to deploy_aw_windows.yml file list
- Ansible: add aw_windows_email_collector_enabled/mode vars
- InnoSetup: add email-outbound-collector.ps1 to [Files] section
- Common module: add EmailCollectorScript to Copy-ActivityWatchCollectorAssets,
  New-ActivityWatchDeploymentConfig, launch-watchers script
- Deploy scripts: pass EmailCollectorScript through pipeline
- Deployment configs: add emailCollectorScript path
- Sync all changes to install-kit copy

Co-Authored-By: Fashion Lisa <igor04091968@gmail.com>
2026-05-04 18:07:14 +00:00
igor04091968 bfee99d679 fix(windows): prevent collector process storms and scope query patch 2026-05-04 21:05:44 +03:00
Devin AI b7a7ac42e4 Improve print DLP telemetry reliability 2026-05-02 22:45:48 +00:00
igor04091968andDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> fae2e2ca14 Feat & Fix: implement File Telemetry, restore DB history, and stabilize production
- Added File Operations Collector (Plan A) for Windows endpoints
- Restored historical server DB via merging and moved to durable /var/lib/activitywatch path
- Forced XDG_DATA_HOME and XDG_CONFIG_HOME for aw-server-rust in environment and systemd
- Updated Ansible playbooks to handle new file collector and durable server paths
- Added DB merge and backup-restore automation scripts
- Fixed CORS and RU WebUI persistence in production deployment

Generated with [Devin](https://cli.devin.ai/docs)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-05-02 20:59:08 +03:00
igor04091968 f436950bda Update after codex restore 2026-05-02 19:36:25 +03:00
igor04091968 d7fedde69d After deploy from hand restore 2026-05-02 17:54:36 +03:00
Devin AI 2ec90b05ae Унифицировать Windows пути AWatch-rus 2026-05-02 09:44:27 +00:00
Devin AI da99d1ac98 Русифицировать DLP PowerShell и исправить имя документа печати 2026-05-02 08:30:37 +00:00
igor04091968 8278d51840 feat(worktime): add linux remote worker and pve headless tracking 2026-04-30 15:48:09 +03:00
igor04091968 70ffd1f3e8 fix(windows): hide launch tasks behind wscript wrappers 2026-04-27 04:16:25 +03:00
igor04091968 1e9628b01b feat(ansible): add incident screenshot controls for windows phase2 2026-04-27 04:04:37 +03:00
igor04091968 63c3d96a19 feat(dlp): capture screenshot on incident 2026-04-27 03:29:19 +03:00
igor04091968 5584144978 fix(windows): suppress duplicate logon markers per session 2026-04-27 03:00:53 +03:00
igor04091968 0ae2ac7ec1 fix(windows): tolerate existing session marker bucket 2026-04-27 02:56:09 +03:00
igor04091968 53acdcb6f4 feat(windows): add logon markers and disable local agent logs 2026-04-27 02:42:04 +03:00
igor04091968 bdf44b868e fix(windows): recover all phase2 user tasks after reboot 2026-04-27 02:32:11 +03:00
igor04091968 7ef8166504 feat(aw): expand ru webui patch and monitoring assets 2026-04-26 08:54:41 +03:00
igor04091968 f54284a0f9 feat(docs-playbooks): update phase2 runbooks and add windows winrm rollout playbook 2026-04-25 18:00:13 +03:00
igor04091968 bf27369b2a feat(dlp-phase2): add endpoint signal collector for clipboard usb print and policy wiring 2026-04-25 16:26:07 +03:00