Sync from dev @ 497baf0

Source: main (497baf0)
Excluded: live tenant exports, generated artifacts, and dev-only tooling.

azure-pipelines.yml

@@ -6,8 +6,8 @@ parameters:
     default: false
 
 schedules:
-  - cron: "0 * * * *"
-    displayName: "Hourly backup (full run at configured timezone)"
+  - cron: "0 2 * * *"
+    displayName: "Daily full backup and report generation"
     branches:
       include:
         - main
@@ -369,6 +369,19 @@ jobs:
           workingDirectory: "$(Build.SourcesDirectory)"
           failOnStderr: true
 
+      - task: Bash@3
+        displayName: Revert formatting-only Intune JSON exports
+        inputs:
+          targetType: inline
+          script: |
+            set -euo pipefail
+            python3 "$(Build.SourcesDirectory)/scripts/filter_intune_formatting_noise.py" \
+              --repo-root "$(Build.SourcesDirectory)" \
+              --backup-root "$(Build.SourcesDirectory)/$(BACKUP_FOLDER)/$(INTUNE_BACKUP_SUBDIR)" \
+              --baseline-ref "origin/$(BASELINE_BRANCH)"
+          workingDirectory: "$(Build.SourcesDirectory)"
+          failOnStderr: true
+
       - task: Bash@3
         displayName: Resolve assignment group names
         inputs:
@@ -1017,13 +1030,14 @@ jobs:
               }
 
               $backupStart = [DateTime]::ParseExact("$(BACKUP_START)", "yyyy.MM.dd:HH.mm.ss", $null).ToUniversalTime()
-              $filterDateTimeTo = Get-Date -Date $backupStart -Format "yyyy-MM-ddTHH:mm:ss"
+              $auditQueryEnd = $backupStart.AddMinutes(-10)
+              $filterDateTimeTo = Get-Date -Date $auditQueryEnd -Format "yyyy-MM-ddTHH:mm:ss"
               $filter += "ActivityDateTime le $filterDateTimeTo`Z"
 
               $eventFilter = $filter -join " and "
 
               "`nGetting Intune event logs"
-              "`t- from: '$lastCommitDate' (UTC) to: '$backupStart' (UTC)"
+              "`t- from: '$lastCommitDate' (UTC) to: '$auditQueryEnd' (UTC)"
               "`t- filter: $eventFilter"
               $modificationEvent = Get-MgDeviceManagementAuditEvent -Filter $eventFilter -All