Describe Sentinel as endpoint detection and response
This commit is contained in:
parent
a51478fa22
commit
812cf0c836
6 changed files with 28 additions and 25 deletions
|
|
@ -1,11 +1,12 @@
|
|||
# Enodia Sentinel Specification
|
||||
|
||||
This document defines Enodia Sentinel as a host security platform, not only a
|
||||
signature IDS. The current implementation is a local Linux sensor with evidence
|
||||
capture, integrity monitoring, anti-rootkit checks, a dashboard, and alert
|
||||
delivery. The intended product is a defensive control plane for a host or small
|
||||
fleet: detect compromise, prove what changed, preserve useful evidence, guide
|
||||
response, and make sensor tampering visible.
|
||||
This document defines Enodia Sentinel as an endpoint detection and response
|
||||
system, not only a signature IDS. The current implementation is a local Linux
|
||||
sensor with evidence capture, integrity monitoring, anti-rootkit checks, a
|
||||
dashboard, alert delivery, and dry-run response planning. The intended product
|
||||
is a defensive control plane for a host or small fleet: detect compromise, prove
|
||||
what changed, preserve useful evidence, guide response, and make sensor
|
||||
tampering visible.
|
||||
|
||||
## Product Definition
|
||||
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue