OC-5070 d7d9f72fc6 Session log: Dataforth security incident, MFA rollout, test datasheet investigation ...

- DF-JOEL2 compromised via ScreenConnect social engineering (Angel Raya)
- C2 IPs blocked, rogue clients removed, M365 sessions revoked, password reset
- IC3 complaint filed, abuse reports sent to Virtuo and ConnectWise
- Conditional Access policies deployed (MFA, block foreign, block legacy auth)
- 38 stale test station accounts deleted from Entra
- Test datasheet pipeline investigated - data exists in DB, export step broken
- TestDataSheetUploader source code extracted for analysis

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-27 20:07:19 -07:00

.claude

sync: Auto-sync from GURU-BEAST-ROG at 2026-03-25 03:45:04

2026-03-25 03:46:07 -07:00

api

Reorganize repo: compartmentalize scripts by client/project

2026-03-20 17:15:07 -07:00

clients

Session log: Dataforth security incident, MFA rollout, test datasheet investigation

2026-03-27 20:07:19 -07:00

docs

Reorganize repo: compartmentalize scripts by client/project

2026-03-20 17:15:07 -07:00

fleet

Add HEARTBEAT.md to fleet workspaces — Discord check-in on heartbeat

2026-03-24 19:29:42 -07:00

imported-conversations

feat: Complete DOS update system with test data routing fix

2026-01-19 12:49:54 -07:00

infrastructure

Reorganize repo: compartmentalize scripts by client/project

2026-03-20 17:15:07 -07:00

mcp-servers

sync: Auto-sync from ACG-M-L5090 at 2026-01-22 19:22:24

2026-01-22 19:23:16 -07:00

migrations

sync: Auto-sync from Mikes-MacBook-Air.local at 2026-03-09 08:14:13

2026-03-09 08:14:13 -07:00

projects

sync: Auto-sync from GURU-BEAST-ROG at 2026-03-25 03:45:04

2026-03-25 03:46:07 -07:00

scripts

Reorganize repo: compartmentalize scripts by client/project

2026-03-20 17:15:07 -07:00

session-logs

sync: Auto-sync from GURU-BEAST-ROG at 2026-03-25 03:45:04

2026-03-25 03:46:07 -07:00

temp

sync: Dataforth sync fixes, TestDataDB stability, and client scripts

2026-03-13 06:08:31 -07:00

tests

feat: Major directory reorganization and cleanup

2026-01-18 20:42:28 -07:00

tmp

scc: NWTOC v5.0 - fix test exe deployment, session log

2026-03-16 18:55:48 -07:00

tools

Reorganize repo: compartmentalize scripts by client/project

2026-03-20 17:15:07 -07:00

.env.example

Complete Phase 6: MSP Work Tracking with Context Recall System

2026-01-17 06:00:26 -07:00

.gitignore

Add radio show audio processor and post-show workflow

2026-03-21 11:51:59 -07:00

.mcp.json.example

feat: Add Sequential Thinking to Code Review + Frontend Validation

2026-01-17 16:23:52 -07:00

ai-misconceptions-reading-list.md

sync: Auto-sync from ACG-M-L5090 at 2026-02-09

2026-02-09 20:24:03 -07:00

alembic.ini

sync: Auto-sync from Mikes-MacBook-Air.local at 2026-03-09 08:14:13

2026-03-09 08:14:13 -07:00

ANALYSIS_COMPLETE.md

feat: Complete DOS update system with test data routing fix

2026-01-19 12:49:54 -07:00

AUTOCODER_INTEGRATION.md

feat: Add Sequential Thinking to Code Review + Frontend Validation

2026-01-17 16:23:52 -07:00

BEHAVIORAL_RULES_INTEGRATION_SUMMARY.md

feat: Complete DOS update system with test data routing fix

2026-01-19 12:49:54 -07:00

CATALOG_CLIENTS.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

CATALOG_PROJECTS.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

CATALOG_SESSION_LOGS.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

CATALOG_SHARED_DATA.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

CATALOG_SOLUTIONS.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

claudetools-api.tar.gz

[Config] Add coding guidelines and code-fixer agent

2026-01-17 12:51:43 -07:00

claudetools-migration-20260225.tar.gpg

sync: Auto-sync from ACG-M-L5090 at 2026-03-10 19:11:00

2026-03-10 19:59:08 -07:00

CLIENT_DIRECTORY.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

CONTEXT_RECOVERY_PROMPT.md

fix: Remove all emojis from documentation for cross-platform compliance

2026-01-20 16:21:06 -07:00

CREDENTIAL_AUDIT_2026-01-24.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

CREDENTIAL_GAP_ANALYSIS.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

credentials.md

Migrate credentials to 1Password: 58 items across 4 vaults

2026-03-24 13:46:48 -07:00

DEPLOYMENT_CHECKLIST.txt

feat: Complete DOS update system with test data routing fix

2026-01-19 12:49:54 -07:00

DEPLOYMENT_GUIDE.md

feat: Complete DOS update system with test data routing fix

2026-01-19 12:49:54 -07:00

directives.md

refactor: Trim CLAUDE.md and directives to reduce context window pressure

2026-02-17 10:49:35 -07:00

DOS_FIX_INDEX.txt

feat: Complete DOS update system with test data routing fix

2026-01-19 12:49:54 -07:00

FILE_DEPENDENCIES.md

Add deployment safeguards to prevent code mismatch issues

2026-01-18 15:13:47 -07:00

GREPAI_OPTIMIZATION_GUIDE.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-22 19:22:24

2026-01-22 19:23:16 -07:00

GREPAI_OPTIMIZATION_SUMMARY.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-22 19:22:24

2026-01-22 19:23:16 -07:00

GREPAI_SYNC_STRATEGY.md

docs: Add Mac sync guide and grepai sync strategy

2026-01-22 19:06:45 -07:00

GURURMM_API_ACCESS.md

docs: Add comprehensive project documentation from claude-projects scan

2026-01-22 09:58:32 -07:00

IMPORT_COMPLETE_REPORT.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

IMPORT_VERIFICATION.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

INITIAL_DATA.md

fix: Remove all emojis from documentation for cross-platform compliance

2026-01-20 16:21:06 -07:00

MAC_SYNC_PROMPT.md

docs: Add Mac sync guide and grepai sync strategy

2026-01-22 19:06:45 -07:00

MCP_INSTALLATION_SUMMARY.md

feat: Add Sequential Thinking to Code Review + Frontend Validation

2026-01-17 16:23:52 -07:00

MCP_SERVERS.md

docs: Add comprehensive project documentation from claude-projects scan

2026-01-22 09:58:32 -07:00

NEW_MACHINE_SETUP.md

Switch Gitea remotes from SSH to HTTPS for reliable access

2026-03-13 06:10:29 -07:00

ORGANIZATION_SETUP_COMPLETE.md

Complete project organization: move all DOS files to projects/dataforth-dos, create client folders, update Claude config

2026-01-20 16:03:00 -07:00

package-retrieved.json

docs: Document Dataforth test database system and troubleshooting

2026-01-21 16:38:54 -07:00

PHASE1_QUICK_SUMMARY.txt

Complete Phase 6: MSP Work Tracking with Context Recall System

2026-01-17 06:00:26 -07:00

PHASE3_TEST_REPORT.md

fix: Remove all emojis from documentation for cross-platform compliance

2026-01-20 16:21:06 -07:00

PROJECT_DIRECTORY.md

sync: Auto-sync from ACG-M-L5090 at 2026-01-26 16:45:54

2026-02-01 16:23:47 -07:00

PROJECT_ORGANIZATION.md

Complete project organization: move all DOS files to projects/dataforth-dos, create client folders, update Claude config

2026-01-20 16:03:00 -07:00

PROJECTS_INDEX.md

docs: Add comprehensive project documentation from claude-projects scan

2026-01-22 09:58:32 -07:00

QUICKSTART-retrieved.md

docs: Document Dataforth test database system and troubleshooting

2026-01-21 16:38:54 -07:00

requirements.txt

sync: Auto-sync from Mikes-MacBook-Air.local at 2026-03-09 08:14:13

2026-03-09 08:14:13 -07:00

save_session_context.json

[Config] Add coding guidelines and code-fixer agent

2026-01-17 12:51:43 -07:00

SESSION_NOTES-retrieved.md

docs: Document Dataforth test database system and troubleshooting

2026-01-21 16:38:54 -07:00

session-context.json

Remove conversation context/recall system from ClaudeTools

2026-01-18 19:10:41 -07:00

START_HERE.md

fix: Remove all emojis from documentation for cross-platform compliance

2026-01-20 16:21:06 -07:00

UPDATE_WORKFLOW.md

feat: Complete DOS update system with test data routing fix

2026-01-19 12:49:54 -07:00

VPN_QUICK_SETUP.md

feat: Add AD2 WinRM automation and modernize sync infrastructure

2026-01-19 14:28:24 -07:00

Description

Custom Claude Code behaviors and workflows - Multi-mode operation system

3 GiB

Languages

Python 30.2%

QuickBASIC 14.4%

PowerShell 14.3%

JavaScript 11.6%

omnetpp-msg 10.8%

Other 18.7%