luna/enodia-sentinal
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Add dashboard rule atlas

Browse source
This commit is contained in:
Luna 2026-06-15 16:37:51 -07:00
parent 5db88d285e
commit e43d7689a0
7 changed files with 130 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

6
docs/COMMAND_REFERENCE.md
View file

@ -322,9 +322,9 @@ HTTPS is mandatory. If `web_tls_cert` / `web_tls_key` are not configured,
Sentinel creates a self-signed pair under `log_dir`; add a browser exception for
that certificate or replace it with a private/local CA certificate.
The console exposes incidents, alert snapshots, posture findings, event tail,
and dry-run response plans. It remains read-only; response commands are displayed
for review but not executed from the browser.
The console exposes incidents, alert snapshots, posture findings, event-rule
metadata, event tail, and dry-run response plans. It remains read-only; response
commands are displayed for review but not executed from the browser.
Expected use: `enodia-sentinel-web.service`.

2
docs/SPECIFICATION.md
View file

@ -102,7 +102,7 @@ When a fresh alert survives cooldown, Sentinel writes:
|---|---|
| CLI | Run daemon, one-shot checks, baseline management, FIM checks, package DB checks, rootcheck, posture audit, incident review/export, triage, status/watchdog, and response planning. |
| Logs | Durable local evidence under `/var/log/enodia-sentinel`. |
| Dashboard | HTTPS-only read-only web view for status, incidents, timelines, alert browsing, posture findings, event tail, and response-plan previews. |
| Dashboard | HTTPS-only read-only web view for status, incidents, timelines, alert browsing, posture findings, event-rule metadata, event tail, and response-plan previews. |
| Push | ntfy, Pushover, and generic webhook notifications. |
| Red-team harness | Safe drills for testing signatures and demos. |