T

ci / audit (push) Successful in 19s

Details

[#825 ] STATUS: SOC lane state 2026-09-06

https://projects.knownelement.com/issues/825#note-5012

2026-09-06 14:22:22 -05:00

.crush

[#335 ] point questions file at Redmine (model retired)

2026-09-05 05:33:03 -05:00

.gitea/workflows

[#784 ] add fleet CI workflow (shellcheck + secret scan + rule audit)

2026-09-05 06:01:49 -05:00

docs

SOC: Wazuh alert tuning + #823-pattern detections

2026-09-06 14:09:49 -05:00

rules

SOC: Wazuh alert tuning + #823-pattern detections

2026-09-06 14:09:49 -05:00

scripts

[#784 ] framework: set-e-safe cn_count fallback (|| true, not bare removal)

2026-09-05 07:27:20 -05:00

tests

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:22:18 -05:00

.env.example

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:22:18 -05:00

.shellcheckrc

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:22:18 -05:00

AGENTS.md

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:22:18 -05:00

deploy-agent.sh

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:22:18 -05:00

deploy-rsyslog.sh

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:22:18 -05:00

LICENSE

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:22:18 -05:00

Makefile

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:22:18 -05:00

questions-v1.md

[#335 ] point questions file at Redmine (model retired)

2026-09-05 05:33:03 -05:00

README.md

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:22:18 -05:00

STATUS.md

[#825 ] STATUS: SOC lane state 2026-09-06

2026-09-06 14:22:22 -05:00

README.md

siem

Docs live on Discourse — this repo is the executable source of truth. Topic: https://community.turnsys.com/t/326 Redmine: https://projects.knownelement.com/issues/335 · Split from KNEL/PFVCluster@041d311 per #769

Centralized syslog + SIEM: Wazuh manager (tsys-siem 4.14.7), fleet agent deploy (mirror-first pinned debs), PVE rsyslog forwarding. [#335]

Layout

scripts/ — rule engine + hooks (see bash scripts/check-rules.sh --fast)
(imported content at repo root, mirroring its PFVCluster path layout)

Provenance

Code imported from KNEL/PFVCluster (041d311); full git history retained in PFVCluster. Enforcement layer copied per ADOPTING.md. IaC consumers: KNEL/KNELIAC references this repo.