luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add HTTPS management console and response planning

Browse source
This commit is contained in:
Luna 2026-06-12 02:39:53 -07:00
parent a56d72edd6
commit a7129e5666
16 changed files with 927 additions and 160 deletions
Download patch file Download diff file Expand all files Collapse all files

12
docs/RUNBOOKS.md
View file

@ -21,7 +21,15 @@ For any alert, before changing anything:
alerts, when was the last.
3. **Triage known noise.** `enodia-sentinel triage` separates likely false
positives from findings that need a human.
4. **Preserve evidence before you touch anything:**
4. **Build a dry-run response plan.** Find the incident and review the proposed
actions:
```bash
enodia-sentinel incident list
enodia-sentinel respond plan <incident-id>
```
5. **Preserve evidence before you touch anything:**
```bash
tar -C /var/log -czf /tmp/enodia-evidence-$(date +%s).tgz enodia-sentinel
@ -208,7 +216,7 @@ edited Sentinel is itself an alert.
- From the **watchdog host** (never the protected host):
```bash
enodia-sentinel watchdog --url http://<host>:8787 --token <token> --max-age 120
enodia-sentinel watchdog --url https://<host>:8787 --token <token> --max-age 120
```
Exit 1 means down, unreachable, or stale.