C-Prot Windows telemetry updates

[tsale]

EDR Telemetry Pull Request

Contribution Details

Consolidates the C-Prot Windows telemetry updates that were originally submitted as separate PRs for individual subcategories:

• C-Prot Windows USB Device Mount #191 C-Prot Windows USB Device Mount
• C-Prot Windows USB Device Unmount #192 C-Prot Windows USB Device Unmount
• C-Prot Windows Group Policy Modification #193 C-Prot Windows Group Policy Modification
• C-Prot Windows Volume Shadow Copy Deletion #194 C-Prot Windows Volume Shadow Copy Deletion

Changed file:

• EDR_telem_windows.json

Telemetry Validation

Documentation or Evidence:

• Official documentation
• Screenshots attached
• Sanitized logs provided
• Private documentation

This PR preserves the submitted C-Prot Windows changes as a single OS-scoped review unit. Evidence details remain as provided by the contributor in the original PRs and should be reviewed before publication/merge.

Type of Contribution

• Adding telemetry information for an existing EDR product

Validation Details

EDR Product Information

• EDR Product Name: C-Prot EDR
• EDR Version: Not specified in the original PRs
• Operating System(s) Tested: Windows

Testing Methodology

Not specified in the original PRs. This consolidation was validated mechanically by:

• dry-merging PRs C-Prot Windows USB Device Mount #191-C-Prot Windows Volume Shadow Copy Deletion #194 together locally with no merge conflicts
• validating EDR_telem_windows.json as syntactically valid JSON

Additional Notes

This PR is intended to replace the individual C-Prot Windows PRs listed above so the project can review multiple same-OS telemetry changes in one pull request.

[tsale]

@husnuoner thank you for the C-Prot EDR telemetry contributions.

For future submissions, please group related telemetry updates into a single pull request per operating system rather than opening one pull request per individual category or row. For example:

• one PR for multiple Windows changes
• one PR for multiple Linux changes
• one PR for multiple macOS changes

This makes review, validation, and merging much easier for the project.

I’ve consolidated the current submissions into OS-scoped PRs here:

• macOS: #195
• Windows: #196

Thanks again for contributing.