luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Persist dry-run response plans

Browse source
This commit is contained in:
Luna 2026-06-13 05:53:48 -07:00
parent 812cf0c836
commit 1a5b6f1d8d
11 changed files with 133 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/RUNBOOKS.md
View file

@ -29,6 +29,11 @@ For any alert, before changing anything:
enodia-sentinel respond plan <incident-id>
```
The CLI writes a copy under
`/var/log/enodia-sentinel/response-plans/` and appends
`/var/log/enodia-sentinel/response-audit.log`, so the reviewed plan can be
handed off or compared with later actions.
5. **Preserve evidence before you touch anything:**
```bash