From e790d7c7e8d3c1753e9900fd5ad624483b3f0744 Mon Sep 17 00:00:00 2001 From: Howard Enos Date: Mon, 6 Jul 2026 16:43:49 -0700 Subject: [PATCH] wiki: compile goldstein (seed) --- wiki/clients/goldstein.md | 72 +++++++++++++++++++++++++++++++++++++++ wiki/index.md | 3 +- 2 files changed, 74 insertions(+), 1 deletion(-) create mode 100644 wiki/clients/goldstein.md diff --git a/wiki/clients/goldstein.md b/wiki/clients/goldstein.md new file mode 100644 index 00000000..0d99d5ea --- /dev/null +++ b/wiki/clients/goldstein.md @@ -0,0 +1,72 @@ +--- +type: client +name: goldstein +display_name: Goldstein (Sheldon Goldstein) +last_compiled: 2026-07-06 +compiled_by: HOWARD-HOME/claude-main +sources: + - clients/goldstein/session-logs/2026-07/2026-07-06-howard-dallas-rmm-onboard.md + - clients/goldstein/onboarding-baselines/DALLAS-20260706T233936.md +backlinks: [] +--- + +# Goldstein (Sheldon Goldstein) + +## Profile +- **Contract type:** Break-fix / T&M (Syncro `prepay_hours` = 0). History shows a small monthly + recurring invoice (~$59.30) alongside occasional labor at $150/hr remote. +- **Key contacts:** Michelle Goldstein — 972-814-5677 (Dallas location); Sheldon Goldstein — + sheldon@lawyersdallas.com; "Armory Park Location" (Tucson). +- **Billing rate:** $150/hr remote (verify onsite/emergency against Syncro). +- **Hours remaining (if prepaid):** none (break-fix). +- **Syncro customer ID:** 25307933 +- **Managed devices (Syncro assets):** 1 +- **Two physical locations:** Dallas, TX (Michelle) and Tucson, AZ / Armory Park (Sheldon). + Law firm (lawyersdallas.com). + +## Infrastructure + +### GuruRMM +- **Client:** Goldstein — `7eed26be-4126-40a5-8414-3c0c28b9d182` +- **Sites:** + - **Dallas** (TX) — site code `SILVER-PEAK-3739`, id `653b7e39-5e5e-4b93-b135-c70fc12ececa` + - **Tucson** (AZ) — site code `RED-LION-9255`, id `4526ef0e-31d6-48f1-8df4-40d3a16519c1` + +### Endpoints (GuruRMM agents) +| Host | Site | OS | Notes | +|---|---|---|---| +| DALLAS | Dallas | Windows 11 Home (26200 / 25H2) | Lenovo Yoga Slim 7 15ILL9, serial PF570RZ0; Michelle's laptop (`Dallas\miche`); workgroup; enrolled 2026-07-06; agent id `36c7bbc8-504f-4b4a-8995-3b3e5cdc0f02` | +| ASUS-2024 | Dallas | Windows | Pre-existing Dallas-site agent | +| DalRes10 | Tucson | Windows | (verify role) | +| GS-Backup | Tucson | Windows | Name implies backup box (verify) | + +### DALLAS endpoint detail (onboarding baseline 2026-07-06, grade AMBER) +- Intel Core Ultra 7 256V, 15.6 GB RAM; TPM + Secure Boot; BitLocker on C: 100% (RecoveryPassword + TPM). +- Public IP 99.127.21.4; private 192.168.1.226 (Intel Wi-Fi 7 BE201); DNS/gateway 192.168.1.1. +- Defender active + tamper-protected (only registered AV); all firewall profiles on; SMBv1 off; LAPS present. +- Local admins: `Dallas\Administrator`, `Dallas\miche`. + +## Access +- **Remote access:** ScreenConnect (ConnectWise Control) — DALLAS session + `29c62473-a5cb-4e94-a190-c91f05031809`, tagged Company=Goldstein / Site=Dallas. GuruRMM agent also present. +- **GuruRMM install (Dallas site):** https://rmm.azcomputerguru.com/install/SILVER-PEAK-3739 +- **Vault:** (verify — no client secrets vaulted yet) + +## Patterns & Known Issues +- **Multi-site under one Syncro customer** — Dallas (TX) and Tucson (Armory Park) locations map to + two GuruRMM sites; make sure new endpoints land in the correct site (Dallas machines → `SILVER-PEAK-3739`). +- **DALLAS laptop hygiene (2026-07-06):** pending Windows updates + pending reboot; time source on + local CMOS (not NTP); **no backup agent detected** — confirm whether this laptop needs cloud/local backup. + +## Active Work +- **Syncro #32490** — "Remote - Unable to remote access to the computers in Dallas" (New). + ScreenConnect installed + GuruRMM agent deployed to DALLAS on 2026-07-06; private note added. + +## History Highlights +- **2026-07-06** — Onboarded DALLAS (Michelle's Lenovo) to remote management: ScreenConnect installed, + GuruRMM agent deployed into the existing Goldstein/Dallas site, onboarding diagnostic run (AMBER, + 0 critical). Ticket #32490. + +## Backlinks + +*(none yet)* diff --git a/wiki/index.md b/wiki/index.md index 54979ee4..bfb5bb7a 100644 --- a/wiki/index.md +++ b/wiki/index.md @@ -2,7 +2,7 @@ Last updated: 2026-07-06 Compiled by: HOWARD-HOME/claude-main -(2026-07-06: added Reference section — client Wi-Fi inventory.) +(2026-07-06: added Goldstein client article; added Reference section — client Wi-Fi inventory.) This wiki is LLM-maintained. Do not edit articles manually — run `/wiki-compile` to update. Run `/wiki-lint` to check for stale entries and broken backlinks. @@ -29,6 +29,7 @@ Run `/wiki-lint` to check for stale entries and broken backlinks. | [CryoWeave](clients/cryoweave.md) | Custom cryogenic cable assemblies; cPanel on IX; website redesign + SEO project in progress; Syncro ID not documented | 2026-05-24 | | [Darrell Delphen](clients/darrell-delphen.md) | Break-fix residential (Yantis, TX); single Windows workstation DDDOffice072023 (GuruRMM); 2026-06-18 Outlook email links failing = ISP-managed Extreme EXOS gateway "NetIQ" SNI-filtering of Intermedia's url.emailprotection.link rewriter (WARP interim bypass, ISP disabled the feature for permanent fix); Syncro #35996725 | 2026-06-18 | | [Glaz-Tech Industries](clients/glaztech.md) | ~200 users, 9 locations; prepaid ~22.25 hrs; web server WWW (192.168.8.72 / 65.113.52.88) — IIS 10/VB.NET e-commerce; CRITICAL security posture: website connects to GTI-INV-SQL as sysadmin (login `tom`, named SQL login, C0 top finding) + plaintext PANs+CVV (stored by GTIware PSA, not website) + plaintext passwords + SQLi via `quo()` + XSS; apex 404 fixed + payment TLS fixed 2026-06-03; intrusion/brute-force log review 2026-06-04 (no attacker found; H5 detection blind spot confirmed — HTTP 200 on both success/failure + no failed-login logging); #32378 Waiting on Customer (assessment + reports + Appendix A delivered); M365 no MFA; SCL bypass rules for vendor DMARC + MailProtector digests | 2026-06-04 | +| [Goldstein (Sheldon Goldstein)](clients/goldstein.md) | Law firm (lawyersdallas.com), break-fix/T&M; two locations — Dallas TX (Michelle) + Tucson/Armory Park (Sheldon); GuruRMM client with Dallas (SILVER-PEAK-3739) + Tucson (RED-LION-9255) sites; DALLAS laptop onboarded 2026-07-06 (ScreenConnect + GuruRMM agent, diag AMBER 0-critical, no backup agent); Syncro #32490; cust 25307933 | 2026-07-06 | | [Grabb & Durando Law Office](clients/grabb-durando.md) | Personal injury law firm; GND-SERVER GuruRMM enrolled; AI demand review app scoped ($4K–$7K); website migration pending; plaintext DB password in README needs vaulting | 2026-05-24 | | [Pavon](clients/pavon.md) | Former/archive client; GeoVision NVR surveillance; OwnCloud at 172.16.3.22 backed by Uranus; cron stacking fixed; Nextcloud migration deferred 3–6 months | 2026-05-24 | | [Rieusset Corp (Tom Sorensen)](clients/rieusset-corp.md) | Small business; email hosted on Neptune Exchange (4 mailboxes: tsorensen, tomrc, ojodeagua, csorensen @rieussetcorp.com); Mailprotector domain ID 57833; outbound via SBR Outbound.Sorensen connector; clipto.com allow rule added 2026-06-08 | 2026-06-08 |