oceans2alaska
610a3bb447
- Add privacy projection (core/privacy.py), private report storage, bounded
process capture; omit identities, free text and unapproved paths
- Mask remote peer IPs: only loopback/host/wildcard stay numeric, others are
reduced to remote_scope private/public (schema + scoring updated)
- Map ss TCP states to canonical names; ASCII-only numeric fields; fix
"Microsoft Visual C++" product matching (Python and PowerShell)
- Merge 7fed3b9: -Diagnostic switch, serialization exit code 3, PS7 module
path, UI error detail; keep hardened task/certificate collectors
- Add audit docs, privacy docs and regression tests
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
31 lines
1.7 KiB
PowerShell
31 lines
1.7 KiB
PowerShell
function Get-SamsaraStorage {
|
|
param($Result)
|
|
Invoke-SamsaraRead $Result 'Fixed local disk metadata' {
|
|
$index = 0
|
|
$Result.data = @(Get-CimInstance -ClassName Win32_LogicalDisk -Filter 'DriveType = 3' -Property DeviceID,Size,FreeSpace,FileSystem -ErrorAction Stop | ForEach-Object {
|
|
$index++
|
|
[pscustomobject]@{ type = 'Volume'; name = 'Volume-' + $index
|
|
path = Get-SamsaraApprovedRoot (([string]$_.DeviceID) + '\')
|
|
filesystem = [string]$_.FileSystem; capacity_gib = [math]::Round(([double]$_.Size / 1GB), 2)
|
|
free_gib = [math]::Round(([double]$_.FreeSpace / 1GB), 2) }
|
|
})
|
|
}
|
|
$Result.status = 'partial'
|
|
$Result.limitations += 'Fixed drive-letter disks only; labels and child paths not read. Mount-only volumes and external storage dependencies need review.'
|
|
}
|
|
|
|
function Get-SamsaraShares {
|
|
param($Result)
|
|
Invoke-SamsaraRead $Result 'Configured SMB share roots' {
|
|
$index = 0
|
|
$Result.data = @(Get-SmbShare -ErrorAction Stop | ForEach-Object {
|
|
$index++
|
|
$name = if ([string]$_.Name -match '^(ADMIN|IPC|[A-Z])\$$') { ([string]$_.Name).ToUpperInvariant() } else { 'Share-' + $index }
|
|
[pscustomobject]@{ type = 'SMB Share'; name = $name; path = Get-SamsaraApprovedRoot ([string]$_.Path)
|
|
capacity_gib = $null; free_gib = $null; special = [bool]$_.Special }
|
|
})
|
|
}
|
|
$Result.status = 'partial'
|
|
$Result.limitations += 'Configured roots only; exact approved local roots may be retained. No file enumeration, open-file activity, filenames, child paths, sessions or client identities are queried. Active share consumers remain unverified.'
|
|
}
|