oceans2alaska/Samsara
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Privacy hardening, remote-peer IP masking and review fixes

Browse Source 
- Add privacy projection (core/privacy.py), private report storage, bounded
  process capture; omit identities, free text and unapproved paths
- Mask remote peer IPs: only loopback/host/wildcard stay numeric, others are
  reduced to remote_scope private/public (schema + scoring updated)
- Map ss TCP states to canonical names; ASCII-only numeric fields; fix
  "Microsoft Visual C++" product matching (Python and PowerShell)
- Merge 7fed3b9: -Diagnostic switch, serialization exit code 3, PS7 module
  path, UI error detail; keep hardened task/certificate collectors
- Add audit docs, privacy docs and regression tests

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
This commit is contained in:
Not Dave
2026-11-04 18:50:24 -08:00
parent 7fed3b9ab9
commit 610a3bb447
51 changed files with 2719 additions and 604 deletions
Download Patch File Download Diff File Expand all files Collapse all files

379
samsara/assets/privacy_catalogue.json Normal file
View File

@@ -0,0 +1,379 @@
{
"services": [
"acpid",
"apache2",
"auditd",
"bfe",
"bind9",
"bits",
"brokerinfrastructure",
"cbdhsvc",
"cdpsusersvc",
"cdpsvc",
"certsvc",
"chronyd",
"clipsvc",
"containerd",
"coremessagingregistrar",
"cron",
"crond",
"cryptsvc",
"dbus",
"dcomlaunch",
"defragsvc",
"deviceassociationservice",
"dhcp",
"dhcpserver",
"diagnosticshub.standardcollector.service",
"diagtrack",
"dns",
"dnscache",
"docker",
"dps",
"dusmsvc",
"eventlog",
"eventsystem",
"fdphost",
"fdrespub",
"firewalld",
"fontcache",
"gpsvc",
"haproxy",
"hidserv",
"httpd",
"hvhost",
"iphlpsvc",
"irqbalance",
"isc-dhcp-server",
"kea-dhcp4",
"keyiso",
"ktmrm",
"lanmanserver",
"lanmanworkstation",
"lfsvc",
"licensemanager",
"lmhosts",
"lsm",
"mariadb",
"minecraft",
"minecraft-server",
"mpssvc",
"msdtc",
"mssqlserver",
"multipathd",
"mysql",
"mysqld",
"named",
"netlogon",
"netman",
"netprofm",
"nfs-server",
"nginx",
"nlasvc",
"nsi",
"ntds",
"pcasvc",
"plugplay",
"podman",
"policyagent",
"polkit",
"postgresql",
"power",
"profsvc",
"rasman",
"redis",
"redis-server",
"remoteaccess",
"remoteregistry",
"rpceptmapper",
"rpcss",
"rsyslog",
"rustserver",
"samss",
"schedule",
"seclogon",
"securityhealthservice",
"sens",
"sense",
"sessionenv",
"shellhwdetection",
"smb",
"smbd",
"spooler",
"sppsvc",
"sqlserveragent",
"sqlwriter",
"ssdpsrv",
"ssh",
"sshd",
"stisvc",
"storsvc",
"swprv",
"sysmain",
"systemeventsbroker",
"termservice",
"themes",
"timebrokersvc",
"tomcat",
"trustedinstaller",
"tuned",
"ualsvc",
"udisks2",
"uhssvc",
"umrdpservice",
"usosvc",
"valheim",
"vds",
"vmicheartbeat",
"vmickvpexchange",
"vmicshutdown",
"vmictimesync",
"vmicvss",
"vss",
"w32time",
"w3logsvc",
"w3svc",
"was",
"wdiservicehost",
"wdisystemhost",
"wdnissvc",
"wecsvc",
"wersvc",
"windefend",
"winhttpautoproxysvc",
"winmgmt",
"winrm",
"wlidsvc",
"wpnservice",
"wsearch",
"wuauserv"
],
"processes": [
"apache2",
"arkascendedserver",
"bedrock_server",
"brave",
"chrome",
"containerd",
"curl",
"dhcpd",
"dockerd",
"firefox",
"haproxy",
"hlds",
"httpd",
"idle",
"iexplore",
"iisexpress",
"kea-dhcp4",
"lsass",
"mariadbd",
"msedge",
"msmpeng",
"mysqld",
"named",
"nfsd",
"nginx",
"opera",
"palserver",
"podman",
"postgres",
"postmaster",
"redis-server",
"rustdedicated",
"services",
"shootergameserver",
"smbd",
"smss",
"spoolsv",
"sqlservr",
"srcds",
"srcds_linux",
"sshd",
"steam",
"steamservice",
"steamwebhelper",
"svchost",
"system",
"tomcat",
"valheim_server",
"w3wp",
"wget",
"wininit",
"winlogon",
"wmiprvse",
"wsmprovhost"
],
"roles": [
"ad-domain-services",
"adcs-cert-authority",
"dhcp",
"dns",
"failover-clustering",
"file-services",
"fs-fileserver",
"hyper-v",
"net-framework-45-aspnet",
"net-framework-45-core",
"net-framework-45-features",
"net-framework-core",
"net-framework-features",
"powershell",
"powershell-ise",
"powershell-v2",
"rds-rd-server",
"rsat",
"storage-services",
"telnet-client",
"web-server",
"windows-defender",
"windows-defender-features",
"windows-search",
"wow64-support"
],
"products": [
"Microsoft SQL Server",
"PostgreSQL",
"MariaDB",
"MySQL",
"nginx",
"Apache HTTP Server",
"Redis",
"Docker",
"Microsoft .NET",
"Microsoft Visual C++",
"Microsoft Edge",
"Google Chrome",
"Mozilla Firefox",
"Steam",
"Valheim Dedicated Server",
"Minecraft Server"
],
"families": {
"directory": {
"names": [
"ntds"
],
"prefixes": [],
"representative": "ntds"
},
"sql": {
"names": [
"mssqlserver",
"sqlserveragent"
],
"prefixes": [
"mssql$",
"sqlagent$"
],
"representative": "mssqlserver"
},
"iis": {
"names": [
"w3svc"
],
"prefixes": [],
"representative": "w3svc"
},
"web": {
"names": [
"nginx",
"apache2",
"httpd",
"haproxy",
"tomcat"
],
"prefixes": [
"tomcat"
],
"representative": "nginx"
},
"postgres": {
"names": [
"postgresql"
],
"prefixes": [
"postgresql-"
],
"representative": "postgresql"
},
"mysql": {
"names": [
"mysql",
"mysqld",
"mariadb"
],
"prefixes": [
"mysql",
"mariadb"
],
"representative": "mysql"
},
"redis": {
"names": [
"redis",
"redis-server"
],
"prefixes": [
"redis-"
],
"representative": "redis"
},
"containers": {
"names": [
"docker",
"containerd",
"podman"
],
"prefixes": [],
"representative": "docker"
},
"dns": {
"names": [
"dns",
"named",
"bind9"
],
"prefixes": [],
"representative": "dns"
},
"dhcp": {
"names": [
"dhcpserver",
"isc-dhcp-server",
"kea-dhcp4"
],
"prefixes": [],
"representative": "dhcpserver"
},
"ca": {
"names": [
"certsvc"
],
"prefixes": [],
"representative": "certsvc"
},
"file-sharing": {
"names": [
"smbd",
"smb",
"nfs-server"
],
"prefixes": [],
"representative": "smbd"
},
"game-server": {
"names": [
"minecraft",
"minecraft-server",
"valheim",
"rustserver"
],
"prefixes": [
"minecraft@",
"valheim-server"
],
"representative": "minecraft"
}
}
}