luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Persist dry-run response plans

Browse source
This commit is contained in:
Luna 2026-06-13 05:53:48 -07:00
parent 812cf0c836
commit 1a5b6f1d8d
11 changed files with 133 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/OPERATIONS.md
View file

@ -93,7 +93,9 @@ When Sentinel fires:
```
Review the plan before acting; Sentinel does not execute containment
commands.
commands. CLI-generated plans are saved under
`/var/log/enodia-sentinel/response-plans/` and indexed in
`/var/log/enodia-sentinel/response-audit.log` for later review.
5. If the alert involves a binary, run:
```bash