luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Generate event rule documentation

Browse source
This commit is contained in:
Luna 2026-06-15 18:52:28 -07:00
parent e43d7689a0
commit 7f4d5b42fd
8 changed files with 378 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

2
docs/ROADMAP.md
View file

@ -160,7 +160,7 @@ turning Sentinel into a noisy rules dump.
configured rules.
- ✅ Add `enodia-sentinel rules test <event-json>` so operators can validate
custom event rules against captured or fixture events.
- Generate rule documentation from source defaults: SID, signature, classtype,
- ✅ Generate rule documentation from source defaults: SID, signature, classtype,
event type, match fields, expected false positives, and drill coverage.
- Require a fixture or safe red-team drill for every built-in SID, including
event-only and correlation SIDs.