Claude 7a5ffae480 Switch AppX filter from blacklist to whitelist strategy
The blacklist approach leaked dozens of inbox apps (Cortana, Xbox*,
Zune*, GetHelp, ScreenSketch, Clipchamp, MicrosoftCorporationII.*,
etc.) producing noise with no security relevance.

New approach:
- Microsoft-published packages: only a curated whitelist passes
  (CompanyPortal, Teams, Office, WSL, Terminal, RemoteDesktop, etc.)
- Non-Microsoft publishers: always allowed (rare, usually relevant)
- Framework/runtime prefixes: always excluded regardless of publisher

This ensures near-zero noise from AppX enumeration.

https://claude.ai/code/session_01CnCJ28kuJcrWtQZcX4kCAw
2026-03-21 17:43:39 +00:00
2026-03-19 16:44:12 +01:00
2026-03-20 08:21:04 +01:00
2026-02-10 02:37:31 +01:00
2026-03-20 08:12:09 +01:00
2026-03-20 23:51:12 +01:00
2026-03-17 18:24:01 +01:00
2026-02-05 06:14:41 +01:00

Autopilot Monitor

Advanced monitoring and troubleshooting solution for Windows Autopilot deployments.

Overview

Autopilot Monitor provides real-time tracking, intelligent diagnostics, and automated troubleshooting for Windows Autopilot enrollment processes. It consists of:

  • Bootstrap Script — PowerShell script deployed via Intune that starts monitoring early in the enrollment process
  • Monitoring Agent — Lightweight .NET application that collects telemetry and evidence during enrollment
  • Backend API — Azure Functions-based ingestion and processing pipeline
  • Web Dashboard — Next.js application for real-time monitoring and fleet analytics

Architecture

For detailed information about the system architecture, components, and data flow, see Architecture Documentation.

Documentation

Full documentation is available at autopilotmonitor.com/docs

License

MIT License — see LICENSE for details

S
Description
Windows Autopilot & Intune enrollment monitoring: live session timelines, fleet health, diagnostics, and an MCP server for AI-assisted troubleshooting.
Readme AGPL-3.0 60 MiB
Languages
C# 72.7%
TypeScript 25.7%
PowerShell 1%
JavaScript 0.5%