2 Commits

Author	SHA1	Message	Date
Mike Swanson	c6c79d8f3e	data(rednour): onboarding baseline for REDNOURCARRIEVI (3rd machine, RED) ... Completes Rednour first-baseline set. Note: ScreenConnect/Splashtop/Syncro/Datto RMM+EDR flagged critical are ACG's own stack (false positives - detection tuning tracked separately). Real issues: Win10 22H2 EOL, RDP without NLA, no BitLocker, C: 12% free. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-05-29 13:24:10 -07:00
Mike Swanson	df9be01065	feat(rmm): onboarding diagnostic (Phase 1) - probe + triage + baseline ... /rmm diagnose: dispatches a Windows security/health probe to a newly onboarded agent, grades RED/AMBER/GREEN, writes an immutable per-client baseline (clients/<slug>/onboarding-baselines/), diffs vs prior, and alerts CRITICALs to #dev-alerts. Probe is PS5.1/ASCII/SYSTEM-safe, never-abort, base64 chunked upload around the agent command-size cap. Code-reviewed (no blockers); folded in immutability guard, severity-independent finding ids, Defender-unknown sentinel, expanded competitor/backup detection. First baselines captured: Rednour FRONTDESKRECEPT + LEGALASST (both RED - prior MSP ScreenConnect/Splashtop/Syncro still live; LEGALASST OS EOL). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-05-29 13:09:11 -07:00