luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add Suricata assimilation design

Browse source
This commit is contained in:
Luna 2026-07-10 04:16:31 -07:00
parent 9784033f86
commit 8d929b50bd
No known key found for this signature in database
4 changed files with 294 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
docs/ROADMAP.md
View file

@ -263,6 +263,9 @@ Useful ideas that need design before implementation:
- YARA-compatible scanning for selected paths.
- Sigma-like host event rules.
- SBOM and package provenance reporting.
- Suricata model assimilation: stateful sessions, EVE-style event envelope,
rule metadata/thresholding, datasets, and triggered forensic capture
([SURICATA_ASSIMILATION.md](SURICATA_ASSIMILATION.md)).
- Offline evidence bundle for outside analysis.
- Dashboard import of exported incident bundles.
- Support for non-pacman package managers in signed-package verification.