Commit Graph
65 Commits
Author SHA1 Message Date
igor04091968 106d796d95 fix(hayabusa): restore scheduled EVTX upload pipeline 2026-06-12 10:57:39 +03:00
igor04091968 aa641cba2f fix(ops): harden worktime recovery and collector guard 2026-06-07 11:41:20 +03:00
igor04091968 7bc1d4170a feat(workforce): add interpretation policy config 2026-06-03 13:03:24 +03:00
igor04091968 0302d888f6 feat(workforce): add trend interpretation insights 2026-06-03 12:48:51 +03:00
igor04091968 01ff3b8e29 feat(workforce): persist daily management history 2026-06-03 12:13:26 +03:00
igor04091968 a1801fca5f docs(public): sanitize release materials 2026-06-03 08:52:20 +03:00
igor04091968 9fc218dc49 chore(public): sanitize repository presentation 2026-06-03 08:02:15 +03:00
igor04091968 dbef90a09e refactor(detmir): retire python runtime paths 2026-06-03 03:27:52 +03:00
igor04091968 19e3682bc8 feat(detmir): add rust-first operations tooling 2026-06-02 17:57:58 +03:00
igor04091968 05e8856bb2 feat(grafana): extend pfsense dashboard visualization 2026-05-28 18:14:10 +03:00
igor04091968 cc9e4a0669 fix(aw): harden collectors and grafana exports 2026-05-28 10:54:46 +03:00
igor04091968 3042bd5042 feat(detmir): ship ops, dlp, 1c and mcp updates 2026-05-27 05:56:43 +03:00
igor04091968 b420104f1f feat(alerts): enable telegram and improve operator text 2026-05-21 22:41:15 +03:00
igor04091968 0c88b519ee feat(hayabusa): add auto-case scoring and 6h automation 2026-05-21 20:47:49 +03:00
igor04091968 99143b108b feat(aw-rus): sync deploy stack, install kit, and health checks 2026-05-21 15:16:23 +03:00
igor04091968 4fb1c9335e docs(grafana): add dashboard import playbook and presentation assets 2026-05-15 09:20:02 +03:00
igor04091968 9927cdb195 hardening: strengthen deploy and validation gates 2026-05-15 08:07:18 +03:00
igor04091968 15941e48cb docs(sales): add russian sales overview and switch calendar day start 2026-05-15 07:16:24 +03:00
igor04091968 ab0ee7d49d fix(windows): capture localized admin rdp activity 2026-05-15 04:50:33 +03:00
igor04091968 93a3169203 feat(dlp): add infosec grafana dashboard 2026-05-15 02:22:48 +03:00
igor04091968 873e43fb2e feat(worktime): publish RDP activity to Grafana 2026-05-15 01:23:23 +03:00
igor04091968 76d1377736 fix(activity): restore real window watchers and isolate rdp bridge 2026-05-14 20:02:46 +03:00
igor04091968 0cce6fd08e feat(dfir): add hayabusa forensic workflow integration 2026-05-14 15:04:07 +03:00
igor04091968 91c3b46f16 fix(ops): sync verified production baseline for AW-Rus DLP 2026-05-13 22:50:42 +03:00
igor04091968 22aadd5c03 fix(bot): align AW-Rus worktime check with idle RDP state 2026-05-13 08:47:53 +03:00
igor04091968 f6ee903b10 fix(worktime): isolate global session collector and reset RDP bridge flow 2026-05-13 08:18:47 +03:00
igor04091968 070a8f8f7e feat(dlp): add compliance reporting scheduler and admin CLI 2026-05-13 03:31:40 +03:00
igor04091968 28a4dae67f feat(dlp): implement case management service and DLP Review integration 2026-05-13 03:08:53 +03:00
igor04091968 fd2e9ac59d feat(dlp): implement SIEM/SOAR integrations (CEF, webhook, syslog, systemd timers) 2026-05-13 02:30:52 +03:00
igor04091968 4e99100e6c fix(worktime): add API self-heal and bot worktime remediation deploy vars 2026-05-12 16:48:30 +03:00
igor04091968 d812a8bb80 fix(dlp): enforce server policy mode and preserve policy-engine settings in hardening 2026-05-12 00:07:05 +03:00
igor04091968 8be0de1c85 feat(ansible): add post-deploy aw-health-check gate 2026-05-11 22:57:57 +03:00
igor04091968 e0561bf865 fix(windows): disable outlook popup and enforce smtp-only email monitoring 2026-05-11 20:46:39 +03:00
igor04091968 4b5c75bdbb feat(dlp): deploy hayabusa IOC refresh on aw-server with post-deploy checks 2026-05-10 03:13:28 +03:00
igor04091968 aa0ccc4ecf fix(ansible): run smoke-check on controller + per-user validation dir 2026-05-09 09:42:36 +03:00
igor04091968 211a6a6eac fix(windows-deploy): enforce awHostname override and safe single-instance collector restart 2026-05-08 00:41:00 +03:00
igor04091968 6f5e5eb751 Revert "merge: apply windows standalone service installer and awHostname hardening"
This reverts commit e643576aa9, reversing
changes made to 669501f20a.
2026-05-08 00:41:00 +03:00
igor04091968 693e6832a6 fix(windows-deploy): enforce awHostname override and safe single-instance collector restart 2026-05-08 00:34:52 +03:00
igor04091968 8b92b1136f chore: merge main into PR #15 2026-05-07 07:34:36 +03:00
igor04091968 8a91734a27 fix(worktime): use Europe/Moscow day boundary for aw-rus today reports 2026-05-07 06:30:12 +03:00
igor04091968 a6a05b82a9 fix(webui): persist worktime report links to :5610 in ansible/installkit 2026-05-06 23:24:52 +03:00
igor04091968 03fefcc257 fix(deploy): harden windows rollout, validation and installkit payload 2026-05-06 20:14:51 +03:00
igor04091968andDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> 9e5cb144d4 fix(windows): standardize config paths to AWatch-rus and add bucket hostname filter
- Replace default config paths from C:\ProgramData\ActivityWatch to C:\ProgramData\AWatch-rus
  in dlp-endpoint-signals-collector.ps1 and email-outbound-collector.ps1
- Add isLikelyClientHost() function to reject IP/localhost as valid hostname
  for bucket selection in aw-ru-patch.js
- Add docs/dlp-reliability-roadmap.md and docs/powershell-analysis.md
- Update README.md with links to new documentation

Generated with [Devin](https://cli.devin.ai/docs)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-05-04 23:24:49 +03:00
Devin AIandFashion Lisa a35a8a51bd fix(print): detect generic doc names (Печать документа) + integrate email collector into deploy
Print document naming:
- Add Test-IsGenericDocumentName() to detect placeholder names like
  'Печать документа', 'Print Document', 'Remote Downlevel Document', etc.
- Add Test-NeedsBetterDocumentName() that combines mojibake, generic and
  numeric-only checks into a single gate for PrintService event log fallback
- Replace Test-LooksLikeMojibakeQuestionMarks with Test-NeedsBetterDocumentName
  in Win32_PrintJob polling and Get-PrintServiceDocumentFallback

Email collector deployment integration:
- Ansible: add email-outbound-collector.ps1 to deploy_aw_windows.yml file list
- Ansible: add aw_windows_email_collector_enabled/mode vars
- InnoSetup: add email-outbound-collector.ps1 to [Files] section
- Common module: add EmailCollectorScript to Copy-ActivityWatchCollectorAssets,
  New-ActivityWatchDeploymentConfig, launch-watchers script
- Deploy scripts: pass EmailCollectorScript through pipeline
- Deployment configs: add emailCollectorScript path
- Sync all changes to install-kit copy

Co-Authored-By: Fashion Lisa <igor04091968@gmail.com>
2026-05-04 18:07:14 +00:00
Devin AI 4359f6d5eb Fix Windows file telemetry playbook wiring 2026-05-02 21:44:18 +00:00
igor04091968andDevin <158243242+devin-ai-integration[bot]@users.noreply.github.com> fae2e2ca14 Feat & Fix: implement File Telemetry, restore DB history, and stabilize production
- Added File Operations Collector (Plan A) for Windows endpoints
- Restored historical server DB via merging and moved to durable /var/lib/activitywatch path
- Forced XDG_DATA_HOME and XDG_CONFIG_HOME for aw-server-rust in environment and systemd
- Updated Ansible playbooks to handle new file collector and durable server paths
- Added DB merge and backup-restore automation scripts
- Fixed CORS and RU WebUI persistence in production deployment

Generated with [Devin](https://cli.devin.ai/docs)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-05-02 20:59:08 +03:00
igor04091968 f436950bda Update after codex restore 2026-05-02 19:36:25 +03:00
igor04091968 7f58a49c0a Разворачивание деплоя 2026-05-02 17:28:49 +03:00
Devin AI 2e49310023 Добавить безопасную миграцию prod в AWatch-rus 2026-05-02 11:58:28 +00:00
Devin AI 2ec90b05ae Унифицировать Windows пути AWatch-rus 2026-05-02 09:44:27 +00:00