mirror of
https://github.com/okieselbach/AutopilotMonitor.git
synced 2026-10-25 05:00:07 +00:00
Oliver Kieselbach
4e21ae3008
- H1: Require TenantAdmin or GalacticAdmin for mutative tenant endpoints (DeleteSession, MarkSessionFailed, UpdateTenantConfiguration, AnalyzeRules CRUD, GatherRules CRUD) - M1: Add EnsureValidGuid validation to TenantOffboardFunction to prevent OData injection via tenantId route parameter - M2: Remove ex.Message from error responses in UsageMetrics, PlatformUsageMetrics, TriggerMaintenance, TenantOffboard, ReseedFromGitHub to prevent internal error leakage - M4: Use requireGalacticAdmin on ProtectedRoute and server-derived user.isGalacticAdmin instead of localStorage for admin-configuration - N1: Add 1-second Regex timeout to agent GatherRuleExecutor and ImeLogTracker to prevent ReDoS from malicious patterns Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Autopilot Monitor
Advanced monitoring and troubleshooting solution for Windows Autopilot deployments.
Overview
Autopilot Monitor provides real-time tracking, intelligent diagnostics, and automated troubleshooting for Windows Autopilot enrollment processes. It consists of:
- Bootstrap Script — PowerShell script deployed via Intune that starts monitoring early in the enrollment process
- Monitoring Agent — Lightweight .NET application that collects telemetry and evidence during enrollment
- Backend API — Azure Functions-based ingestion and processing pipeline
- Web Dashboard — Next.js application for real-time monitoring and fleet analytics
Architecture
For detailed information about the system architecture, components, and data flow, see Architecture Documentation.
Documentation
Full documentation is available at autopilotmonitor.com/docs
License
MIT License — see LICENSE for details