Add dashboard rule atlas
This commit is contained in:
parent
5db88d285e
commit
e43d7689a0
7 changed files with 130 additions and 17 deletions
|
|
@ -50,8 +50,8 @@ Implemented investigation/response state:
|
|||
- Incident tracking groups snapshots by process lineage and time window and
|
||||
exposes `incident list/show/export`.
|
||||
- The dashboard is HTTPS-only, token-protected off loopback, and read-only. It
|
||||
shows status, incidents, timelines, alerts, posture findings, event tail, and
|
||||
dry-run response plans.
|
||||
shows status, incidents, timelines, alerts, posture findings, event-rule
|
||||
metadata, event tail, and dry-run response plans.
|
||||
- `respond plan <incident-id>` builds read-only containment/recovery plans,
|
||||
persists CLI-generated plans under `response-plans/`, and appends
|
||||
`response-audit.log`. Dashboard/API plan previews do not write artifacts.
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue