4648acbc4c
sync: auto-sync from HOWARD-HOME at 2026-06-12 17:02:02
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-12 17:02:02
2026-06-12 17:02:16 -07:00
af529f953d
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-12 13:52:32
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-12 13:52:32
2026-06-12 13:52:33 -07:00
ec0d032eb1
chore: clean up tracked tmp/ scratch; graduate ix-server audit + scanner
...
Removed 44 scratch files that got committed into the tracked root tmp/
(grok/gemini second-opinion rounds r1-r7, rmm-diag-* dumps, ns*.out
captures, and throwaway helpers jssh.py/addnpmnat.php/delnpmnat.php/
cleanup.sh/fix_ws_agent.py) — all from the resolved RMM command_type
'cmd' investigation, already captured in session logs + the gururmm wiki.
Graduated the three non-scratch artifacts per TEMP_GRADUATION.md:
- tmp/site-scan.sh -> scripts/cpanel-wp-site-scan.sh (+ header)
- tmp/ix-site-audit.md -> clients/internal-infrastructure/reports/2026-03-16-ix-server-cpanel-wp-audit.md
- tmp/ix-scan-results.txt -> clients/internal-infrastructure/reports/2026-03-16-ix-server-scan-results.txt
tmp/ is now empty.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-12 06:13:07 -07:00
fd99ee327c
sync: auto-sync from GURU-5070 at 2026-06-12 05:57:38
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-12 05:57:38
2026-06-12 05:58:05 -07:00
f90110d8e8
sync: auto-sync from GURU-5070 at 2026-06-11 11:20:07
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 11:20:07
2026-06-11 11:20:20 -07:00
24bf954aaf
sync: auto-sync from GURU-5070 at 2026-06-11 08:41:42
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:41:42
2026-06-11 08:41:56 -07:00
65ad20ae0f
sync: auto-sync from GURU-5070 at 2026-06-11 08:22:42
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:22:42
2026-06-11 08:22:55 -07:00
55445d78dc
sync: auto-sync from GURU-5070 at 2026-06-11 08:02:42
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:02:42
2026-06-11 08:02:55 -07:00
cfc065b097
sync: auto-sync from GURU-5070 at 2026-06-11 08:00:04
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-11 08:00:04
2026-06-11 08:00:19 -07:00
83133ddce3
sync: auto-sync from HOWARD-HOME at 2026-06-10 20:21:07
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 20:21:07
2026-06-10 20:21:23 -07:00
9c56690270
sync: auto-sync from GURU-5070 at 2026-06-10 20:18:48
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-10 20:18:48
2026-06-10 20:19:05 -07:00
Winter Williams
d573842ba2
sync: auto-sync from GURU-BEAST-ROG at 2026-06-10 15:47:04
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-10 15:47:04
2026-06-10 15:47:12 -07:00
c871ad8815
sync: auto-sync from GURU-5070 at 2026-06-10 15:18:03
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-10 15:18:03
2026-06-10 15:18:16 -07:00
81a321abc0
sync: auto-sync from HOWARD-HOME at 2026-06-10 14:34:34
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 14:34:34
2026-06-10 14:34:43 -07:00
35264f24e0
sync: auto-sync from HOWARD-HOME at 2026-06-10 14:04:01
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 14:04:01
2026-06-10 14:04:10 -07:00
abbc185e02
sync: auto-sync from HOWARD-HOME at 2026-06-10 13:25:54
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 13:25:54
2026-06-10 13:26:10 -07:00
bd5e977b6e
sync: auto-sync from HOWARD-HOME at 2026-06-10 13:15:14
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 13:15:14
2026-06-10 13:15:27 -07:00
e08a21702a
sync: auto-sync from HOWARD-HOME at 2026-06-10 12:28:50
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-10 12:28:50
2026-06-10 12:29:01 -07:00
Winter Williams
cf68d1c718
sync: auto-sync from GURU-BEAST-ROG at 2026-06-10 10:18:35
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-10 10:18:35
2026-06-10 10:18:40 -07:00
Winter Williams
7729874549
sync: auto-sync from GURU-BEAST-ROG at 2026-06-10 10:09:59
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-10 10:09:59
2026-06-10 10:10:08 -07:00
6a961e06f4
sync: auto-sync from GURU-5070 at 2026-06-09 17:27:28
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 17:27:28
2026-06-09 17:28:17 -07:00
4adf2c586c
sync: auto-sync from HOWARD-HOME at 2026-06-09 17:08:26
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-09 17:08:26
2026-06-09 17:08:39 -07:00
67e0f8df20
sync: auto-sync from GURU-5070 at 2026-06-09 16:18:12
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 16:18:12
2026-06-09 16:18:52 -07:00
848ab69df5
sync: auto-sync from GURU-5070 at 2026-06-09 10:52:48
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 10:52:48
2026-06-09 10:53:34 -07:00
2029fa5429
sync: auto-sync from HOWARD-HOME at 2026-06-09 10:33:12
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-09 10:33:12
2026-06-09 10:33:25 -07:00
95b89c56a8
sync: auto-sync from GURU-5070 at 2026-06-09 10:13:37
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-09 10:13:37
2026-06-09 10:14:16 -07:00
53584e1497
report(kittle): IC3 complaint filed - submission ID aa2ef504... (2026-06-09)
...
IC3 filed 2026-06-09 12:46 EST. Stamped the submission ID on the report; bank freeze letters
(Truist/First State/Chase) updated with the IC3 # and real Kittle/ACG contacts - now turnkey to send.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-09 09:49:35 -07:00
4c580fe485
report(kittle): fraud PREVENTED - City stopped payment, Foam Factory confirmed mule
...
Per Kittle bookkeeper (2026-06-09): City of Tucson stopped the payment before any funds reached
the attacker (no completed loss; attempted $130k+). Kittle confirms no Foam Factory relationship,
confirming both receiving accounts are mules. Also: Ken un-restricted from sending (Outbox/Drafts
verified empty first); Lori was never restricted.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-09 09:15:07 -07:00
42135ed557
report(kittle): fold confirmed invoice amounts into IC3 report
...
Inv #31468 $123,776.75 (confirmed), Inv #31400 ~$8,818, Inv #31453 $41,231 (open);
total identified exposure $130,000+ since the ACH change redirects all City->Kittle payments.
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-09 08:04:36 -07:00
c5a7c15cff
report(kittle): IC3 BEC/ACH-fraud complaint package
...
Consolidated FBI IC3 report for the Kittle payment-redirection fraud: victim/payer info,
fraudulent mule accounts (Truist 053201607/1410020505238; Foam Factory First State + Chase),
targeted City of Tucson payments (Inv #31400 ~$8,818 6/9 EFT; Inv #31468 $123,776.75),
attacker IPs/domains/phone, full timeline, and evidence inventory. Evidence package assembled
to Downloads/Kittle-IC3-Package (report + 2 ACH form PDFs + recovered emails + 171-event audit CSV).
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-09 07:52:24 -07:00
d250086933
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 18:57:41
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 18:57:41
2026-06-08 18:57:46 -07:00
ef569dc84b
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 16:57:04
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 16:57:04
2026-06-08 16:57:09 -07:00
31260814ee
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 16:23:44
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 16:23:44
2026-06-08 16:23:48 -07:00
7f7f844eba
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 15:55:24
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 15:55:24
2026-06-08 15:55:30 -07:00
7a84b30047
sync: auto-sync from HOWARD-HOME at 2026-06-08 15:25:56
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-08 15:25:56
2026-06-08 15:26:05 -07:00
a14b723306
sync: auto-sync from GURU-BEAST-ROG at 2026-06-08 10:01:07
...
Author: Mike Swanson
Machine: GURU-BEAST-ROG
Timestamp: 2026-06-08 10:01:07
2026-06-08 10:01:14 -07:00
62fed03362
sync: auto-sync from GURU-5070 at 2026-06-07 20:52:31
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-07 20:52:31
2026-06-07 20:52:35 -07:00
6852714981
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-07 19:46:36
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-07 19:46:36
2026-06-07 19:46:38 -07:00
0210d66b40
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-07 12:59:13
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-07 12:59:13
2026-06-07 12:59:46 -07:00
34d34c610f
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-06 11:32:15
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-06 11:32:15
2026-06-06 11:32:16 -07:00
60394a803e
sync: auto-sync from Mikes-MacBook-Air.local at 2026-06-06 06:47:07
...
Author: Mike Swanson
Machine: Mikes-MacBook-Air.local
Timestamp: 2026-06-06 06:47:07
2026-06-06 06:47:08 -07:00
8885f0086d
sync: auto-sync from HOWARD-HOME at 2026-06-05 21:51:31
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 21:51:31
2026-06-05 21:51:41 -07:00
7ff9dbc624
sync: auto-sync from HOWARD-HOME at 2026-06-05 18:26:57
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 18:26:57
2026-06-05 18:27:06 -07:00
bf491354e3
sync: auto-sync from HOWARD-HOME at 2026-06-05 17:35:42
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 17:35:42
2026-06-05 17:35:53 -07:00
2fcdc5fb13
sync: auto-sync from GURU-5070 at 2026-06-05 16:44:08
...
Author: Mike Swanson
Machine: GURU-5070
Timestamp: 2026-06-05 16:44:08
2026-06-05 16:44:18 -07:00
f5bdec125a
sync: auto-sync from HOWARD-HOME at 2026-06-05 16:17:06
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 16:17:06
2026-06-05 16:17:18 -07:00
1aa9fcecad
glaztech: Tom reply #2 (sent) + quo checklist + payroll/TimeForce answer logged
...
- 2026-06-05-tom-reply2-draft.md (SENT): web-DB rearchitecture ack, CVV-no-paper
correction, key-backup/escrow guidance, least-priv sync-job note
- 2026-06-05-tom-quo-checklist.txt: clean 80-site quo() list sent to Tom
- session log: TimeForce 2005->2008->2016 payroll chain (load-bearing, preserve)
- guru-rmm submodule pointer -> dashboard redesign doc set (local)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 14:37:26 -07:00
68298c8b70
sync: auto-sync from HOWARD-HOME at 2026-06-05 14:06:17
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 14:06:17
2026-06-05 14:06:24 -07:00
47b71b7b3a
rmm dashboard redesign (Gemini live review) + CDP Chrome driver
...
- .claude/scripts/cdp.py: drive Chrome via DevTools Protocol; screenshots to disk
(so Gemini/Grok can see the live site). Fixes invisible-window + no-disk-screenshot.
- reference_cdp_chrome_driver.md (+ MEMORY index)
- gururmm submodule pointer -> dashboard redesign docs (local 3cef6ba)
- session log
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com >
2026-06-05 13:10:37 -07:00
ef23753956
sync: auto-sync from HOWARD-HOME at 2026-06-05 12:18:49
...
Author: Howard Enos
Machine: HOWARD-HOME
Timestamp: 2026-06-05 12:18:49
2026-06-05 12:18:59 -07:00