Oliver Kieselbach aeb2be6d64 agent: enrich ime_agent_version with CSP install source (CurrentDownloadUrl) ...

The EnterpriseDesktopAppManagement CSP records every MSI it enforces under
HKLM\SOFTWARE\Microsoft\EnterpriseDesktopAppManagement\<SID>\MSI\{ProductCode},
including CurrentDownloadUrl and ProductVersion. New ImeMsiInstallSourceProbe
resolves the entry matching the IME version parsed from the IME log (normalized
ProductVersion match first, IntuneWindowsAgent.msi filename fallback) and the
adapter attaches msiDownloadUrl / msiProductCode / msiProductVersion /
msiMatchedBy to the ime_agent_version event - answering which CDN/AFD endpoint
delivered exactly that IME build. Fail-soft, cached per version, additive keys
only (no new event type). Tests: probe selection/normalization + adapter
enrichment; assembly-wide probe default keeps dev machines deterministic.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-17 23:29:37 +02:00

..

Agent

agent: enrich ime_agent_version with CSP install source (CurrentDownloadUrl)

2026-08-17 23:29:37 +02:00

Backend

Security: IME log pattern PUT must be GlobalAdminOnly

2026-08-17 22:09:35 +02:00

McpServer

mcp: errorMessage in tool_call telemetry + get_rule_stats trend opt-in

2026-08-17 09:34:03 +02:00

Shared

WDP hardening: sticky-v2 EnrollmentType + DevicePreparation downgrade guards

2026-08-17 11:55:19 +02:00

Web

Dashboard session rows: native open-in-new-tab via invisible cell link overlays

2026-08-17 22:37:48 +02:00