439dbcaa90
fix tenant config
2026-03-26 09:55:49 +01:00
ab93e482ba
rules description render fix
2026-03-26 09:46:46 +01:00
f6ed4660d1
agent: secureboot certs incl. analyze rule, timezone auto set, NTP offset check
2026-03-26 09:23:12 +01:00
e8e586aa19
Security: request size limit, symlink detection
2026-03-26 08:07:02 +01:00
ffc2f1f67f
Remove submodules: true from web deploy workflows
...
The private submodule (.claude/commands) is not needed for builds
and was causing CI failures since the runner has no access to it.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-26 07:15:00 +01:00
5dabba56ab
Merge branch 'mcp-server'
...
# Conflicts:
# src/Agent/AutopilotMonitor.Agent/buildcounter.txt
# src/Web/autopilot-monitor-web/tsconfig.tsbuildinfo
2026-03-26 07:06:01 +01:00
d4501fbcb3
update license
2026-03-26 07:02:33 +01:00
d825e80ebd
Move Claude Code skills and scripts to private submodule
...
- Replace public rule-builder.md and gitignored commands/scripts
with a private submodule at .claude/commands/
- Submodule: okieselbach/Autopilot-Monitor-dotclaude (private)
- Script paths updated: .claude/scripts/ → .claude/commands/scripts/
- Clone with: git clone --recurse-submodules
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com >
2026-03-26 07:02:02 +01:00
e65a76c836
changed download api for bootstrapper
2026-03-26 06:27:44 +01:00
0df6ed6890
changed api default access
2026-03-25 18:08:04 +01:00
cd32ff9e6d
added dynamic handling to properties
2026-03-25 17:40:12 +01:00
a0886c12d3
more audit
2026-03-24 23:52:08 +01:00
c2b34ceb58
more audit
2026-03-24 21:03:01 +01:00
b6d92c914e
added software mapping delete und userfeedback removed collapse
2026-03-24 16:16:18 +01:00
9f7d6e23f1
initial mcp server implementation
2026-03-24 08:06:48 +01:00
8e1b45042a
changed appinsights events
2026-03-23 07:12:38 +01:00
0fd8ca22d1
renaming global admin
2026-03-23 06:28:59 +01:00
3ae19f48b2
renaming global admin
2026-03-23 06:27:58 +01:00
5226df08d1
re-org sidebar
2026-03-23 05:59:28 +01:00
d59ce5b574
style update
2026-03-23 05:36:04 +01:00
ec6eb2f273
changed styling
2026-03-23 05:29:28 +01:00
4d71260e2e
admin settings expandable pattern
2026-03-23 05:21:01 +01:00
7b172d6270
expandable sidebar menu
2026-03-23 05:15:29 +01:00
2f2228d16f
fix sidebar
2026-03-23 05:04:08 +01:00
4a2b0e8ad9
re-org tenant settings
2026-03-23 04:53:17 +01:00
2a43a72907
re-org admin settings #2
2026-03-22 20:30:01 +01:00
8ab237530a
layout update software mapping
2026-03-22 20:22:25 +01:00
fe8ab4e32b
additional re-org of admin settings
2026-03-22 20:18:18 +01:00
23facc7b91
re-org admin config
2026-03-22 20:00:10 +01:00
8a3519be32
feat: software mappings, changes and bugfix
2026-03-22 18:47:28 +01:00
73c62b19ee
update FAQ region
2026-03-22 18:13:30 +01:00
fe1e23943f
Merge pull request #25 from okieselbach/claude/tenant-config-report-9WElF
...
Add tenant config report page for galactic admins
2026-03-22 18:06:47 +01:00
ea882754ec
Merge pull request #24 from okieselbach/claude/verify-inventory-migration-9Lfoo
...
Expand software inventory collection to include per-user and AppX packages
2026-03-22 18:05:55 +01:00
f6c927bb50
Update auto-generated build artifacts
...
https://claude.ai/code/session_0136YgG8JDuqAhHvMbALyPoZ
2026-03-21 19:29:12 +00:00
bc4c266470
Add Tenant Config Report page for Galactic Admins
...
New read-only report page that shows the full tenant configuration
and computed runtime parameters (AgentConfigResponse) side by side.
Helps Galactic Admins quickly analyze what a tenant has configured.
- Tenant selector to pick any tenant cross-tenant
- All TenantConfiguration fields grouped by section
- Computed runtime parameters with defaults applied
- Non-default values highlighted in purple for quick scanning
- SAS URLs are masked for security
- Added nav item to Galactic Admin section
https://claude.ai/code/session_0136YgG8JDuqAhHvMbALyPoZ
2026-03-21 19:28:36 +00:00
5465d7e1d4
Add Microsoft.ManagementApp back to AppX whitelist
...
Intune Management Extension (IME) is relevant for device management
monitoring alongside CompanyPortal.
https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 18:29:48 +00:00
867e268855
Replace deprecated RemoteDesktop with Windows App in AppX whitelist
...
Microsoft.RemoteDesktop is deprecated, replaced by
MicrosoftCorporationII.WindowsApp (Windows App).
https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 18:14:21 +00:00
ea2d907616
Remove 5 irrelevant entries from AppX whitelist
...
Removed packages that don't belong in the AppX filter:
- Microsoft.ManagementApp (IME is Win32, not AppX)
- Microsoft.MicrosoftOfficeHub (just a launcher, no attack surface)
- Microsoft.PowerBIDesktop (deployed as Win32, not AppX)
- Microsoft.SecHealthUI (UI shell only, Defender version from other sources)
- Microsoft.OneDriveSync (normal Win32 app, not AppX)
https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 18:09:38 +00:00
fd00d976dc
Strict whitelist for all AppX packages, not just Microsoft
...
Sandboxed AppX/MSIX apps rarely have CVEs and the sandbox limits
blast radius. Allowing all 3rd-party AppX packages through would
dilute the report with irrelevant entries.
Now uses a single whitelist for all publishers — only explicitly
listed packages (CompanyPortal, Teams, Office, Terminal, etc.) pass.
Removes the Microsoft vs 3rd-party distinction and the separate
framework/runtime exclude list (no longer needed).
https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 17:58:04 +00:00
7a5ffae480
Switch AppX filter from blacklist to whitelist strategy
...
The blacklist approach leaked dozens of inbox apps (Cortana, Xbox*,
Zune*, GetHelp, ScreenSketch, Clipchamp, MicrosoftCorporationII.*,
etc.) producing noise with no security relevance.
New approach:
- Microsoft-published packages: only a curated whitelist passes
(CompanyPortal, Teams, Office, WSL, Terminal, RemoteDesktop, etc.)
- Non-Microsoft publishers: always allowed (rare, usually relevant)
- Framework/runtime prefixes: always excluded regardless of publisher
This ensures near-zero noise from AppX enumeration.
https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 17:43:39 +00:00
7f7e0ffc98
Add AppX/MSIX and HKU per-user software detection
...
Extend SoftwareInventoryAnalyzer with two new detection sources that
close significant gaps in installed software enumeration:
1. AppX/MSIX packages (AppxAllUserStore\Applications registry):
- Detects modern packaged apps: Company Portal, new Teams, etc.
- Filters out OS components, frameworks, and runtimes to avoid noise
- Parses package full names into vendor/product/version
2. HKU per-user Uninstall keys (via ProfileList SID enumeration):
- Detects per-user installs: VS Code user, Teams Classic, Spotify
- Iterates loaded user hives via Registry.Users
- Skips current user SID to avoid duplicates with existing HKCU read
Both methods are pure registry reads — no WMI, no PowerShell, no
external tools. Typical overhead < 50ms.
https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 17:37:19 +00:00
e2073ebeba
Fix 4 more incorrect CPE entries found by NVD verification
...
- Docker Desktop: docker_desktop → desktop (NVD uses docker:desktop)
- BlackBerry Protect: cylanceprotect → protect (rebranded in NVD)
- WithSecure: f-secure vendor → withsecure (company rebranded)
- ProtonVPN: protonvpn vendor → proton (correct NVD vendor)
Total fixes across all commits: 7 incorrect CPE entries corrected.
https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 16:51:06 +00:00
9b37832347
Add 14 more CPE mappings: hardware drivers, CAD/engineering, productivity
...
Hardware drivers (highest CVE relevance, previously missing category):
- Intel Graphics Driver, Intel Chipset Device Software
- AMD Radeon Software
- NVIDIA GeForce Experience
- Realtek HD Audio Driver
- Canon printer driver
OEM management:
- Lenovo Vantage (complements existing System Update entry)
Creative/Media:
- Adobe Media Encoder (completes CC suite coverage)
Engineering/CAD (enterprise manufacturing/construction):
- Autodesk AutoCAD, Autodesk Revit
- SolidWorks, MATLAB
- Siemens Teamcenter (PLM)
Productivity:
- Grammarly
Total mappings: 247 → 261
https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 16:50:13 +00:00
55da532f17
Improve CPE mapping seed: fix 3 incorrect entries, add 41 new mappings
...
Fixes (NVD-verified):
- CrowdStrike: falcon_sensor → falcon (correct NVD product name)
- Bitwarden: desktop → bitwarden (correct NVD product name)
- Nmap: removed npcap from displayNamePatterns (separate product)
New mappings added (41 entries, 206→247 total):
- Adobe Creative Suite: Creative Cloud, Photoshop, Illustrator, InDesign,
Premiere Pro, After Effects, Animate, Bridge
- Hardware management: Dell SupportAssist, HP Support Assistant,
Intel Driver & Support Assistant, NVIDIA GPU Display Driver
- VPN/Security: SonicWall NetExtender, Check Point Endpoint Security,
Cisco Secure Client, Ivanti Secure Access Client
- Security tools: Tenable Nessus/Agent, RSA SecurID, Trellix Agent,
Absolute Persistence, Wazuh Agent
- Enterprise: SolarWinds Orion, ManageEngine Endpoint Central,
Progress WhatsUp Gold, Elastic Agent
- Communication: Mitel MiCollab, RingCentral, Cisco Webex Teams
- Development: JetBrains CLion/PhpStorm/RubyMine/Toolbox,
Snyk CLI, Beyond Compare, WinMerge
- Print drivers: HP Universal, Ricoh, Lexmark
- Cloud storage: Box Drive, Citrix ShareFile
Also: Edge displayNamePatterns expanded for WebView2 Runtime,
version bumped to 1.1.0, lastUpdated set to 2026-03-21.
https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 16:48:41 +00:00
a300d4b7d4
layout modal fix
2026-03-21 08:14:22 +01:00
aa0b8f3ca7
Added oobeConfig modal dialog
2026-03-21 08:05:23 +01:00
056bbb92ac
fix autoscroll
2026-03-21 00:45:50 +01:00
4fadf0cdde
button alignment
2026-03-21 00:44:19 +01:00
8e0bf00079
simplified seeding
2026-03-21 00:16:25 +01:00
6f24bf0c75
CPE Mappings simplified
2026-03-20 23:51:12 +01:00
Oliver Kieselbach