oceans2alaska
610a3bb447
- Add privacy projection (core/privacy.py), private report storage, bounded
process capture; omit identities, free text and unapproved paths
- Mask remote peer IPs: only loopback/host/wildcard stay numeric, others are
reduced to remote_scope private/public (schema + scoring updated)
- Map ss TCP states to canonical names; ASCII-only numeric fields; fix
"Microsoft Visual C++" product matching (Python and PowerShell)
- Merge 7fed3b9: -Diagnostic switch, serialization exit code 3, PS7 module
path, UI error detail; keep hardened task/certificate collectors
- Add audit docs, privacy docs and regression tests
Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
380 lines
6.3 KiB
JSON
380 lines
6.3 KiB
JSON
{
|
|
"services": [
|
|
"acpid",
|
|
"apache2",
|
|
"auditd",
|
|
"bfe",
|
|
"bind9",
|
|
"bits",
|
|
"brokerinfrastructure",
|
|
"cbdhsvc",
|
|
"cdpsusersvc",
|
|
"cdpsvc",
|
|
"certsvc",
|
|
"chronyd",
|
|
"clipsvc",
|
|
"containerd",
|
|
"coremessagingregistrar",
|
|
"cron",
|
|
"crond",
|
|
"cryptsvc",
|
|
"dbus",
|
|
"dcomlaunch",
|
|
"defragsvc",
|
|
"deviceassociationservice",
|
|
"dhcp",
|
|
"dhcpserver",
|
|
"diagnosticshub.standardcollector.service",
|
|
"diagtrack",
|
|
"dns",
|
|
"dnscache",
|
|
"docker",
|
|
"dps",
|
|
"dusmsvc",
|
|
"eventlog",
|
|
"eventsystem",
|
|
"fdphost",
|
|
"fdrespub",
|
|
"firewalld",
|
|
"fontcache",
|
|
"gpsvc",
|
|
"haproxy",
|
|
"hidserv",
|
|
"httpd",
|
|
"hvhost",
|
|
"iphlpsvc",
|
|
"irqbalance",
|
|
"isc-dhcp-server",
|
|
"kea-dhcp4",
|
|
"keyiso",
|
|
"ktmrm",
|
|
"lanmanserver",
|
|
"lanmanworkstation",
|
|
"lfsvc",
|
|
"licensemanager",
|
|
"lmhosts",
|
|
"lsm",
|
|
"mariadb",
|
|
"minecraft",
|
|
"minecraft-server",
|
|
"mpssvc",
|
|
"msdtc",
|
|
"mssqlserver",
|
|
"multipathd",
|
|
"mysql",
|
|
"mysqld",
|
|
"named",
|
|
"netlogon",
|
|
"netman",
|
|
"netprofm",
|
|
"nfs-server",
|
|
"nginx",
|
|
"nlasvc",
|
|
"nsi",
|
|
"ntds",
|
|
"pcasvc",
|
|
"plugplay",
|
|
"podman",
|
|
"policyagent",
|
|
"polkit",
|
|
"postgresql",
|
|
"power",
|
|
"profsvc",
|
|
"rasman",
|
|
"redis",
|
|
"redis-server",
|
|
"remoteaccess",
|
|
"remoteregistry",
|
|
"rpceptmapper",
|
|
"rpcss",
|
|
"rsyslog",
|
|
"rustserver",
|
|
"samss",
|
|
"schedule",
|
|
"seclogon",
|
|
"securityhealthservice",
|
|
"sens",
|
|
"sense",
|
|
"sessionenv",
|
|
"shellhwdetection",
|
|
"smb",
|
|
"smbd",
|
|
"spooler",
|
|
"sppsvc",
|
|
"sqlserveragent",
|
|
"sqlwriter",
|
|
"ssdpsrv",
|
|
"ssh",
|
|
"sshd",
|
|
"stisvc",
|
|
"storsvc",
|
|
"swprv",
|
|
"sysmain",
|
|
"systemeventsbroker",
|
|
"termservice",
|
|
"themes",
|
|
"timebrokersvc",
|
|
"tomcat",
|
|
"trustedinstaller",
|
|
"tuned",
|
|
"ualsvc",
|
|
"udisks2",
|
|
"uhssvc",
|
|
"umrdpservice",
|
|
"usosvc",
|
|
"valheim",
|
|
"vds",
|
|
"vmicheartbeat",
|
|
"vmickvpexchange",
|
|
"vmicshutdown",
|
|
"vmictimesync",
|
|
"vmicvss",
|
|
"vss",
|
|
"w32time",
|
|
"w3logsvc",
|
|
"w3svc",
|
|
"was",
|
|
"wdiservicehost",
|
|
"wdisystemhost",
|
|
"wdnissvc",
|
|
"wecsvc",
|
|
"wersvc",
|
|
"windefend",
|
|
"winhttpautoproxysvc",
|
|
"winmgmt",
|
|
"winrm",
|
|
"wlidsvc",
|
|
"wpnservice",
|
|
"wsearch",
|
|
"wuauserv"
|
|
],
|
|
"processes": [
|
|
"apache2",
|
|
"arkascendedserver",
|
|
"bedrock_server",
|
|
"brave",
|
|
"chrome",
|
|
"containerd",
|
|
"curl",
|
|
"dhcpd",
|
|
"dockerd",
|
|
"firefox",
|
|
"haproxy",
|
|
"hlds",
|
|
"httpd",
|
|
"idle",
|
|
"iexplore",
|
|
"iisexpress",
|
|
"kea-dhcp4",
|
|
"lsass",
|
|
"mariadbd",
|
|
"msedge",
|
|
"msmpeng",
|
|
"mysqld",
|
|
"named",
|
|
"nfsd",
|
|
"nginx",
|
|
"opera",
|
|
"palserver",
|
|
"podman",
|
|
"postgres",
|
|
"postmaster",
|
|
"redis-server",
|
|
"rustdedicated",
|
|
"services",
|
|
"shootergameserver",
|
|
"smbd",
|
|
"smss",
|
|
"spoolsv",
|
|
"sqlservr",
|
|
"srcds",
|
|
"srcds_linux",
|
|
"sshd",
|
|
"steam",
|
|
"steamservice",
|
|
"steamwebhelper",
|
|
"svchost",
|
|
"system",
|
|
"tomcat",
|
|
"valheim_server",
|
|
"w3wp",
|
|
"wget",
|
|
"wininit",
|
|
"winlogon",
|
|
"wmiprvse",
|
|
"wsmprovhost"
|
|
],
|
|
"roles": [
|
|
"ad-domain-services",
|
|
"adcs-cert-authority",
|
|
"dhcp",
|
|
"dns",
|
|
"failover-clustering",
|
|
"file-services",
|
|
"fs-fileserver",
|
|
"hyper-v",
|
|
"net-framework-45-aspnet",
|
|
"net-framework-45-core",
|
|
"net-framework-45-features",
|
|
"net-framework-core",
|
|
"net-framework-features",
|
|
"powershell",
|
|
"powershell-ise",
|
|
"powershell-v2",
|
|
"rds-rd-server",
|
|
"rsat",
|
|
"storage-services",
|
|
"telnet-client",
|
|
"web-server",
|
|
"windows-defender",
|
|
"windows-defender-features",
|
|
"windows-search",
|
|
"wow64-support"
|
|
],
|
|
"products": [
|
|
"Microsoft SQL Server",
|
|
"PostgreSQL",
|
|
"MariaDB",
|
|
"MySQL",
|
|
"nginx",
|
|
"Apache HTTP Server",
|
|
"Redis",
|
|
"Docker",
|
|
"Microsoft .NET",
|
|
"Microsoft Visual C++",
|
|
"Microsoft Edge",
|
|
"Google Chrome",
|
|
"Mozilla Firefox",
|
|
"Steam",
|
|
"Valheim Dedicated Server",
|
|
"Minecraft Server"
|
|
],
|
|
"families": {
|
|
"directory": {
|
|
"names": [
|
|
"ntds"
|
|
],
|
|
"prefixes": [],
|
|
"representative": "ntds"
|
|
},
|
|
"sql": {
|
|
"names": [
|
|
"mssqlserver",
|
|
"sqlserveragent"
|
|
],
|
|
"prefixes": [
|
|
"mssql$",
|
|
"sqlagent$"
|
|
],
|
|
"representative": "mssqlserver"
|
|
},
|
|
"iis": {
|
|
"names": [
|
|
"w3svc"
|
|
],
|
|
"prefixes": [],
|
|
"representative": "w3svc"
|
|
},
|
|
"web": {
|
|
"names": [
|
|
"nginx",
|
|
"apache2",
|
|
"httpd",
|
|
"haproxy",
|
|
"tomcat"
|
|
],
|
|
"prefixes": [
|
|
"tomcat"
|
|
],
|
|
"representative": "nginx"
|
|
},
|
|
"postgres": {
|
|
"names": [
|
|
"postgresql"
|
|
],
|
|
"prefixes": [
|
|
"postgresql-"
|
|
],
|
|
"representative": "postgresql"
|
|
},
|
|
"mysql": {
|
|
"names": [
|
|
"mysql",
|
|
"mysqld",
|
|
"mariadb"
|
|
],
|
|
"prefixes": [
|
|
"mysql",
|
|
"mariadb"
|
|
],
|
|
"representative": "mysql"
|
|
},
|
|
"redis": {
|
|
"names": [
|
|
"redis",
|
|
"redis-server"
|
|
],
|
|
"prefixes": [
|
|
"redis-"
|
|
],
|
|
"representative": "redis"
|
|
},
|
|
"containers": {
|
|
"names": [
|
|
"docker",
|
|
"containerd",
|
|
"podman"
|
|
],
|
|
"prefixes": [],
|
|
"representative": "docker"
|
|
},
|
|
"dns": {
|
|
"names": [
|
|
"dns",
|
|
"named",
|
|
"bind9"
|
|
],
|
|
"prefixes": [],
|
|
"representative": "dns"
|
|
},
|
|
"dhcp": {
|
|
"names": [
|
|
"dhcpserver",
|
|
"isc-dhcp-server",
|
|
"kea-dhcp4"
|
|
],
|
|
"prefixes": [],
|
|
"representative": "dhcpserver"
|
|
},
|
|
"ca": {
|
|
"names": [
|
|
"certsvc"
|
|
],
|
|
"prefixes": [],
|
|
"representative": "certsvc"
|
|
},
|
|
"file-sharing": {
|
|
"names": [
|
|
"smbd",
|
|
"smb",
|
|
"nfs-server"
|
|
],
|
|
"prefixes": [],
|
|
"representative": "smbd"
|
|
},
|
|
"game-server": {
|
|
"names": [
|
|
"minecraft",
|
|
"minecraft-server",
|
|
"valheim",
|
|
"rustserver"
|
|
],
|
|
"prefixes": [
|
|
"minecraft@",
|
|
"valheim-server"
|
|
],
|
|
"representative": "minecraft"
|
|
}
|
|
}
|
|
}
|