igor04091968
106d796d95
fix(hayabusa): restore scheduled EVTX upload pipeline
2026-06-12 10:57:39 +03:00
igor04091968
2ccf33e1f5
fix(windows): finish rust collector cleanup
2026-06-11 06:28:35 +03:00
igor04091968
1c710dfe94
fix(windows): make collector fallback rust-primary
2026-06-11 06:18:47 +03:00
igor04091968
9c57d6d2ce
feat(rust): advance powershell migration
2026-06-06 08:58:46 +03:00
igor04091968
19e3682bc8
feat(detmir): add rust-first operations tooling
2026-06-02 17:57:58 +03:00
igor04091968
cc9e4a0669
fix(aw): harden collectors and grafana exports
2026-05-28 10:54:46 +03:00
igor04091968
3042bd5042
feat(detmir): ship ops, dlp, 1c and mcp updates
2026-05-27 05:56:43 +03:00
igor04091968
5c6c23ba0f
feat(1c): automate live file telemetry ingestion
2026-05-22 08:09:00 +03:00
igor04091968
0c88b519ee
feat(hayabusa): add auto-case scoring and 6h automation
2026-05-21 20:47:49 +03:00
igor04091968
76d1377736
fix(activity): restore real window watchers and isolate rdp bridge
2026-05-14 20:02:46 +03:00
igor04091968
0cce6fd08e
feat(dfir): add hayabusa forensic workflow integration
2026-05-14 15:04:07 +03:00
igor04091968
d812a8bb80
fix(dlp): enforce server policy mode and preserve policy-engine settings in hardening
2026-05-12 00:07:05 +03:00
igor04091968
211a6a6eac
fix(windows-deploy): enforce awHostname override and safe single-instance collector restart
2026-05-08 00:41:00 +03:00
igor04091968
6f5e5eb751
Revert "merge: apply windows standalone service installer and awHostname hardening"
...
This reverts commit e643576aa9669501f20a
2026-05-08 00:41:00 +03:00
igor04091968
693e6832a6
fix(windows-deploy): enforce awHostname override and safe single-instance collector restart
2026-05-08 00:34:52 +03:00
igor04091968 and Copilot
429501d4fe
chore(pssa): apply safe PSScriptAnalyzer fixes (BOM, empty catch -> Write-Error, Write-Host -> Write-Output)
...
Applied automatic, low-risk fixes for PSScriptAnalyzer warnings. Please review changes for behavior-sensitive code.
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com >
2026-05-07 12:50:35 +03:00
Devin AI and Fashion Lisa
a35a8a51bd
fix(print): detect generic doc names (Печать документа) + integrate email collector into deploy
...
Print document naming:
- Add Test-IsGenericDocumentName() to detect placeholder names like
'Печать документа', 'Print Document', 'Remote Downlevel Document', etc.
- Add Test-NeedsBetterDocumentName() that combines mojibake, generic and
numeric-only checks into a single gate for PrintService event log fallback
- Replace Test-LooksLikeMojibakeQuestionMarks with Test-NeedsBetterDocumentName
in Win32_PrintJob polling and Get-PrintServiceDocumentFallback
Email collector deployment integration:
- Ansible: add email-outbound-collector.ps1 to deploy_aw_windows.yml file list
- Ansible: add aw_windows_email_collector_enabled/mode vars
- InnoSetup: add email-outbound-collector.ps1 to [Files] section
- Common module: add EmailCollectorScript to Copy-ActivityWatchCollectorAssets,
New-ActivityWatchDeploymentConfig, launch-watchers script
- Deploy scripts: pass EmailCollectorScript through pipeline
- Deployment configs: add emailCollectorScript path
- Sync all changes to install-kit copy
Co-Authored-By: Fashion Lisa <igor04091968@gmail.com >
2026-05-04 18:07:14 +00:00
Devin AI
b7a7ac42e4
Improve print DLP telemetry reliability
2026-05-02 22:45:48 +00:00
Devin AI
4359f6d5eb
Fix Windows file telemetry playbook wiring
2026-05-02 21:44:18 +00:00
igor04091968
7f58a49c0a
Разворачивание деплоя
2026-05-02 17:28:49 +03:00
Devin AI
2ec90b05ae
Унифицировать Windows пути AWatch-rus
2026-05-02 09:44:27 +00:00
Devin AI
21f0184115
Согласовать Windows пути с InnoSetup
2026-05-02 09:20:28 +00:00
Devin AI
342ab77f44
Исправить recovery config и разбор RDP sessions
2026-05-02 09:08:14 +00:00
Devin AI
da99d1ac98
Русифицировать DLP PowerShell и исправить имя документа печати
2026-05-02 08:30:37 +00:00
igor04091968
1e9628b01b
feat(ansible): add incident screenshot controls for windows phase2
2026-04-27 04:04:37 +03:00
igor04091968
53acdcb6f4
feat(windows): add logon markers and disable local agent logs
2026-04-27 02:42:04 +03:00
igor04091968
97fe09a150
fix(ansible): align ensemble rollout with current windows deploy
2026-04-26 09:13:41 +03:00
igor04091968
7ef8166504
feat(aw): expand ru webui patch and monitoring assets
2026-04-26 08:54:41 +03:00
igor04091968
bf27369b2a
feat(dlp-phase2): add endpoint signal collector for clipboard usb print and policy wiring
2026-04-25 16:26:07 +03:00
igor04091968
c3a49e658c
feat(dlp-phase1): add policy-based incident pipeline and capability gap analysis
2026-04-25 16:11:05 +03:00
igor04091968
0821de0964
chore: initial private ActivityWatch Russian deployment project
2026-04-25 15:24:04 +03:00
igor04091968