21 Commits

Include renames

Author	SHA1	Message	Date
igor04091968	e658510442	Stabilize Windows logical host guard	2026-07-01 06:06:42 +03:00
igor04091968	106d796d95	fix(hayabusa): restore scheduled EVTX upload pipeline	2026-06-12 10:57:39 +03:00
igor04091968	a1801fca5f	docs(public): sanitize release materials	2026-06-03 08:52:20 +03:00
igor04091968	19e3682bc8	feat(detmir): add rust-first operations tooling	2026-06-02 17:57:58 +03:00
igor04091968	cc9e4a0669	fix(aw): harden collectors and grafana exports	2026-05-28 10:54:46 +03:00
igor04091968	0c88b519ee	feat(hayabusa): add auto-case scoring and 6h automation	2026-05-21 20:47:49 +03:00
igor04091968	ab0ee7d49d	fix(windows): capture localized admin rdp activity	2026-05-15 04:50:33 +03:00
igor04091968	76d1377736	fix(activity): restore real window watchers and isolate rdp bridge	2026-05-14 20:02:46 +03:00
igor04091968	0cce6fd08e	feat(dfir): add hayabusa forensic workflow integration	2026-05-14 15:04:07 +03:00
igor04091968	f6ee903b10	fix(worktime): isolate global session collector and reset RDP bridge flow	2026-05-13 08:18:47 +03:00
igor04091968	d812a8bb80	fix(dlp): enforce server policy mode and preserve policy-engine settings in hardening	2026-05-12 00:07:05 +03:00
igor04091968	e0561bf865	fix(windows): disable outlook popup and enforce smtp-only email monitoring	2026-05-11 20:46:39 +03:00
igor04091968	aa0ccc4ecf	fix(ansible): run smoke-check on controller + per-user validation dir	2026-05-09 09:42:36 +03:00
igor04091968	211a6a6eac	fix(windows-deploy): enforce awHostname override and safe single-instance collector restart	2026-05-08 00:41:00 +03:00
igor04091968	6f5e5eb751	Revert "merge: apply windows standalone service installer and awHostname hardening" ... This reverts commit e643576aa9, reversing changes made to 669501f20a.	2026-05-08 00:41:00 +03:00
igor04091968	693e6832a6	fix(windows-deploy): enforce awHostname override and safe single-instance collector restart	2026-05-08 00:34:52 +03:00
igor04091968	8b92b1136f	chore: merge main into PR #15	2026-05-07 07:34:36 +03:00
igor04091968	03fefcc257	fix(deploy): harden windows rollout, validation and installkit payload	2026-05-06 20:14:51 +03:00
Devin AIandFashion Lisa	a35a8a51bd	fix(print): detect generic doc names (Печать документа) + integrate email collector into deploy ... Print document naming: - Add Test-IsGenericDocumentName() to detect placeholder names like 'Печать документа', 'Print Document', 'Remote Downlevel Document', etc. - Add Test-NeedsBetterDocumentName() that combines mojibake, generic and numeric-only checks into a single gate for PrintService event log fallback - Replace Test-LooksLikeMojibakeQuestionMarks with Test-NeedsBetterDocumentName in Win32_PrintJob polling and Get-PrintServiceDocumentFallback Email collector deployment integration: - Ansible: add email-outbound-collector.ps1 to deploy_aw_windows.yml file list - Ansible: add aw_windows_email_collector_enabled/mode vars - InnoSetup: add email-outbound-collector.ps1 to [Files] section - Common module: add EmailCollectorScript to Copy-ActivityWatchCollectorAssets, New-ActivityWatchDeploymentConfig, launch-watchers script - Deploy scripts: pass EmailCollectorScript through pipeline - Deployment configs: add emailCollectorScript path - Sync all changes to install-kit copy Co-Authored-By: Fashion Lisa <igor04091968@gmail.com>	2026-05-04 18:07:14 +00:00
Devin AI	4359f6d5eb	Fix Windows file telemetry playbook wiring	2026-05-02 21:44:18 +00:00
igor04091968	7f58a49c0a	Разворачивание деплоя	2026-05-02 17:28:49 +03:00