Endpoint Agent
A Rust endpoint agent reports file, process, and network telemetry to the platform.
- Three independent collectors: process enumeration against a suspicious-process set, file-integrity checks against configured watch paths, and connection enumeration against a suspicious-port set.
- Deploys as a Kubernetes DaemonSet or a systemd service on bare metal and VMs.
- Config-supplied watch paths and detection lists are always additive to the built-in defaults — a deployment can widen detection coverage but never silently narrow it.
- Reports batch to the Manager service over an HMAC-authenticated agent surface, with severity levels matched against a validated threat-level enum.