How modzie/claudia works
ClaudIA creates a synthetic Microsoft 365 lab whose personas generate realistic collaboration, AI, and security activity; that telemetry is analyzed and presented through the Activity Story Map. Users can also operate lab tasks through the Teams bot or browser agents. The README documents the platform’s major capabilities, while sampled source confirms selected bot, browser-agent, and story-map internals. Several deployment and security-control relationships below are README-level, not verified from their implementation; those edges cite the README.
Main entry points: app.js Activity Story Map · index.js Activity Graph API · agents.json Synthetic personas · BrowserAgents Browser agents
Components 20
Lab foundation
- Lab deployment
modules - Microsoft 365 tenant
- Security scenarios
modules/Configure-DLP.ps1
Activity simulation
- Synthetic personas
config/agents.json - Storyline scenarios
Storyline - Synthetic content pack
synthetic-m365-purview-pack - Browser agents
BrowserAgents - Persona context
BrowserAgents/lib/personaContext.js - M365 activity
Telemetry and analysis
- Azure Data Explorer
- Telemetry operations
tools - Activity Graph API
activity-story-map/api/ActivityGraph/index.js
User experiences
- Activity Story Map
activity-story-map/web/app.js - Portal visit counter
activity-story-map/api/VisitCounter/index.js - Teams bot
TeamsBot/src/claudiaBot.js - Bot commands
TeamsBot/src/commands.js - PowerShell runner
TeamsBot/src/powershell.js - AI workbench
activity-story-map/web/internal-ai/portal.js
Other components
- Lab operator
- Teams user
Connections 24
- Lab operator → Lab deployment: deploys lab
README.md - Lab deployment → Microsoft 365 tenant: provisions
README.md - Microsoft 365 tenant → Synthetic personas: hosts personas
README.md - Synthetic personas → Storyline scenarios: guides behavior
README.md - Storyline scenarios → Synthetic content pack: uses scenarios
README.md - Browser agents → Persona context: loads context
BrowserAgents/scripts/status-report.js - Persona context → Synthetic personas: reads config
- Browser agents → M365 activity: simulates workflows
README.md - Synthetic content pack → M365 activity: supplies content
README.md - Microsoft 365 tenant → M365 activity: hosts activity
README.md - M365 activity → Security scenarios: triggers signals
README.md - M365 activity → Azure Data Explorer: emits telemetry
README.md - Security scenarios → Azure Data Explorer: produces signals
README.md - Telemetry operations → Azure Data Explorer: operates telemetry
README.md - Activity Graph API → Azure Data Explorer: queries events
activity-story-map/api/ActivityGraph/index.js - Activity Story Map → Activity Graph API: requests activity
- Activity Graph API → Activity Story Map: returns graph
README.md - Lab operator → Activity Story Map: explores activity
README.md - Teams user → Teams bot: sends commands
TeamsBot/src/claudiaBot.js - Teams bot → Bot commands: dispatches text
TeamsBot/src/claudiaBot.js - Bot commands → PowerShell runner: runs scripts
TeamsBot/src/commands.js - PowerShell runner → Microsoft 365 tenant: operates lab
- Lab operator → AI workbench: tries AI scenarios
README.md - Activity Story Map → Portal visit counter: records visits