ed40bc8090
sync: auto-sync from HOWARD-HOME at 2026-06-12 17:02:02
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-12 17:02:02
2026-06-12 17:02:16 -07:00
25de6dc8b9
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-12 13:52:32
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-12 13:52:32
2026-06-12 13:52:33 -07:00
f745182a60
chore: clean up tracked tmp/ scratch; graduate ix-server audit + scanner
...
Removed 44 scratch files that got committed into the tracked root tmp/
(grok/gemini second-opinion rounds r1-r7, rmm-diag-* dumps, ns*.out
captures, and throwaway helpers jssh.py/addnpmnat.php/delnpmnat.php/
cleanup.sh/fix_ws_agent.py) — all from the resolved RMM command_type
'cmd' investigation, already captured in session logs + the gururmm wiki.
Graduated the three non-scratch artifacts per TEMP_GRADUATION.md:
- tmp/site-scan.sh -> scripts/cpanel-wp-site-scan.sh (+ header)
- tmp/ix-site-audit.md -> clients/internal-infrastructure/reports/2026-03-16-ix-server-cpanel-wp-audit.md
- tmp/ix-scan-results.txt -> clients/internal-infrastructure/reports/2026-03-16-ix-server-scan-results.txt
tmp/ is now empty.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-12 06:13:07 -07:00
557cd25e09
sync: auto-sync from GURU-5070 at 2026-06-12 05:57:38
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-12 05:57:38
2026-06-12 05:58:05 -07:00
47ab1d2593
sync: auto-sync from GURU-5070 at 2026-06-11 11:20:07
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 11:20:07
2026-06-11 11:20:20 -07:00
09f2a5ad3f
sync: auto-sync from GURU-5070 at 2026-06-11 08:41:42
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:41:42
2026-06-11 08:41:56 -07:00
665afd6d1d
sync: auto-sync from GURU-5070 at 2026-06-11 08:22:42
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:22:42
2026-06-11 08:22:55 -07:00
f03cdc4360
sync: auto-sync from GURU-5070 at 2026-06-11 08:02:42
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:02:42
2026-06-11 08:02:55 -07:00
09e1d45e20
sync: auto-sync from GURU-5070 at 2026-06-11 08:00:04
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:00:04
2026-06-11 08:00:19 -07:00
72e0e0a28e
sync: auto-sync from HOWARD-HOME at 2026-06-10 20:21:07
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 20:21:07
2026-06-10 20:21:23 -07:00
417a2dea07
sync: auto-sync from GURU-5070 at 2026-06-10 20:18:48
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-10 20:18:48
2026-06-10 20:19:05 -07:00
Winter Williams
4c436743d1
sync: auto-sync from GURU-BEAST-ROG at 2026-06-10 15:47:04
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-10 15:47:04
2026-06-10 15:47:12 -07:00
6eea89c6bc
sync: auto-sync from GURU-5070 at 2026-06-10 15:18:03
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-10 15:18:03
2026-06-10 15:18:16 -07:00
7a0de133d4
sync: auto-sync from HOWARD-HOME at 2026-06-10 14:34:34
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 14:34:34
2026-06-10 14:34:43 -07:00
ea50eb1ad5
sync: auto-sync from HOWARD-HOME at 2026-06-10 14:04:01
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 14:04:01
2026-06-10 14:04:10 -07:00
767ec285e6
sync: auto-sync from HOWARD-HOME at 2026-06-10 13:25:54
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 13:25:54
2026-06-10 13:26:10 -07:00
10d471a639
sync: auto-sync from HOWARD-HOME at 2026-06-10 13:15:14
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 13:15:14
2026-06-10 13:15:27 -07:00
e95940388a
sync: auto-sync from HOWARD-HOME at 2026-06-10 12:28:50
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 12:28:50
2026-06-10 12:29:01 -07:00
Winter Williams
041a6b4bc6
sync: auto-sync from GURU-BEAST-ROG at 2026-06-10 10:18:35
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-10 10:18:35
2026-06-10 10:18:40 -07:00
Winter Williams
73e9309892
sync: auto-sync from GURU-BEAST-ROG at 2026-06-10 10:09:59
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-10 10:09:59
2026-06-10 10:10:08 -07:00
1e7d148580
sync: auto-sync from GURU-5070 at 2026-06-09 17:27:28
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 17:27:28
2026-06-09 17:28:17 -07:00
46e58ef7b5
sync: auto-sync from HOWARD-HOME at 2026-06-09 17:08:26
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-09 17:08:26
2026-06-09 17:08:39 -07:00
88a800ad93
sync: auto-sync from GURU-5070 at 2026-06-09 16:18:12
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 16:18:12
2026-06-09 16:18:52 -07:00
c97c91aba7
sync: auto-sync from GURU-5070 at 2026-06-09 10:52:48
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 10:52:48
2026-06-09 10:53:34 -07:00
19b0e50ac4
sync: auto-sync from HOWARD-HOME at 2026-06-09 10:33:12
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-09 10:33:12
2026-06-09 10:33:25 -07:00
7b762623ff
sync: auto-sync from GURU-5070 at 2026-06-09 10:13:37
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 10:13:37
2026-06-09 10:14:16 -07:00
ee012d08c7
report(kittle): IC3 complaint filed - submission ID aa2ef504... (2026-06-09)
...
IC3 filed 2026-06-09 12:46 EST. Stamped the submission ID on the report; bank freeze letters
(Truist/First State/Chase) updated with the IC3 # and real Kittle/ACG contacts - now turnkey to send.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-09 09:49:35 -07:00
75a0d2ef53
report(kittle): fraud PREVENTED - City stopped payment, Foam Factory confirmed mule
...
Per Kittle bookkeeper (2026-06-09): City of Tucson stopped the payment before any funds reached
the attacker (no completed loss; attempted $130k+). Kittle confirms no Foam Factory relationship,
confirming both receiving accounts are mules. Also: Ken un-restricted from sending (Outbox/Drafts
verified empty first); Lori was never restricted.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-09 09:15:07 -07:00
14c67db3bb
report(kittle): fold confirmed invoice amounts into IC3 report
...
Inv #31468 $123,776.75 (confirmed), Inv #31400 ~$8,818, Inv #31453 $41,231 (open);
total identified exposure $130,000+ since the ACH change redirects all City->Kittle payments.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-09 08:04:36 -07:00
3f96f5a52d
report(kittle): IC3 BEC/ACH-fraud complaint package
...
Consolidated FBI IC3 report for the Kittle payment-redirection fraud: victim/payer info,
fraudulent mule accounts (Truist 053201607/1410020505238; Foam Factory First State + Chase),
targeted City of Tucson payments (Inv #31400 ~$8,818 6/9 EFT; Inv #31468 $123,776.75),
attacker IPs/domains/phone, full timeline, and evidence inventory. Evidence package assembled
to Downloads/Kittle-IC3-Package (report + 2 ACH form PDFs + recovered emails + 171-event audit CSV).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-09 07:52:24 -07:00
62255a86f3
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 18:57:41
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 18:57:41
2026-06-08 18:57:46 -07:00
08afbbf9d9
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 16:57:04
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 16:57:04
2026-06-08 16:57:09 -07:00
57e7251dbc
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 16:23:44
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 16:23:44
2026-06-08 16:23:48 -07:00
2d15e55e3a
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 15:55:24
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 15:55:24
2026-06-08 15:55:30 -07:00
81ff46c5ec
sync: auto-sync from HOWARD-HOME at 2026-06-08 15:25:56
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-08 15:25:56
2026-06-08 15:26:05 -07:00
bf777166d4
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 10:01:07
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 10:01:07
2026-06-08 10:01:14 -07:00
858ba14a0f
sync: auto-sync from GURU-5070 at 2026-06-07 20:52:31
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-07 20:52:31
2026-06-07 20:52:35 -07:00
c778037dde
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-07 19:46:36
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-07 19:46:36
2026-06-07 19:46:38 -07:00
2273a96a9f
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-07 12:59:13
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-07 12:59:13
2026-06-07 12:59:46 -07:00
9027557071
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-06 11:32:15
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-06 11:32:15
2026-06-06 11:32:16 -07:00
7a9f080995
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-06 06:47:07
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-06 06:47:07
2026-06-06 06:47:08 -07:00
a6c56079a6
sync: auto-sync from HOWARD-HOME at 2026-06-05 21:51:31
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 21:51:31
2026-06-05 21:51:41 -07:00
6cc835f0fe
sync: auto-sync from HOWARD-HOME at 2026-06-05 18:26:57
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 18:26:57
2026-06-05 18:27:06 -07:00
b0efd6d4ec
sync: auto-sync from HOWARD-HOME at 2026-06-05 17:35:42
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 17:35:42
2026-06-05 17:35:53 -07:00
8b82e28ed6
sync: auto-sync from GURU-5070 at 2026-06-05 16:44:08
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-05 16:44:08
2026-06-05 16:44:18 -07:00
be30af771f
sync: auto-sync from HOWARD-HOME at 2026-06-05 16:17:06
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 16:17:06
2026-06-05 16:17:18 -07:00
7e90d11acd
glaztech: Tom reply #2 (sent) + quo checklist + payroll/TimeForce answer logged
...
- 2026-06-05-tom-reply2-draft.md (SENT): web-DB rearchitecture ack, CVV-no-paper
correction, key-backup/escrow guidance, least-priv sync-job note
- 2026-06-05-tom-quo-checklist.txt: clean 80-site quo() list sent to Tom
- session log: TimeForce 2005->2008->2016 payroll chain (load-bearing, preserve)
- guru-rmm submodule pointer -> dashboard redesign doc set (local)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 14:37:26 -07:00
aba60a173c
sync: auto-sync from HOWARD-HOME at 2026-06-05 14:06:17
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 14:06:17
2026-06-05 14:06:24 -07:00
383f137186
rmm dashboard redesign (Gemini live review) + CDP Chrome driver
...
- .claude/scripts/cdp.py: drive Chrome via DevTools Protocol; screenshots to disk
(so Gemini/Grok can see the live site). Fixes invisible-window + no-disk-screenshot.
- reference_cdp_chrome_driver.md (+ MEMORY index)
- gururmm submodule pointer -> dashboard redesign docs (local 3cef6ba)
- session log
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 13:10:37 -07:00
b56c7a8ae7
sync: auto-sync from HOWARD-HOME at 2026-06-05 12:18:49
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 12:18:49
2026-06-05 12:18:59 -07:00