Sentinel-C - Sentinel-C is a modular security testing framework

项目说明

Sentinel-C v4.5

Author:
Contact: .com

Sentinel-C is a local-first host integrity monitoring framework for defensi.
It builds a trusted baseline, detects drift (new/modified/deleted files), and produces
consistent CLI, HTML, JSON, and CS for both humans and automation.

Core Capabilities

Baseline creation and strict baseline-target

Recursi scanning with SHA-256 hashing

Multi-format reporting (CLI ASCII table, HTML, JSON)

Baseline tamper guard with SHA-256 seal

CI-friendly status and workflows with stable exit codes

Maintenance operations (doctor, purge, tail log, baseline import/export)

Guidance sentences in terminal and reports with risk, summary, and clear next actions

Safety and Trust Model

Local-first: no automatic data upload

Explicit state changes: baseline update requires an explicit command

Transparent outcomes: structured summaries, report files, deterministic exit codes

Ethical use only: run only on systems you own or are authorized to monitor

Quick Start

For full platform setup instructions, see SETUP.md.

Automated Binary Build Scripts

Sentinel-C includes platform-specific build automation under building-scripts/:

Windows PowerShell: building-scripts/build-windows.ps1

Linux shell: building-scripts/build-linux.sh

macOS shell: building-scripts/build-macos.sh

Termux (Android): termux-support/build-termux.sh

Examples:

Each script:

required tools (cmake, compiler)

handles configure/build failures with explicit error messages

the output binary exists after build

copies the built binary into bin-releases/<platform>/releases/bin/

Command Reference

Major Commands

--init <path>: initialize baseline (--force, --json)

--scan <path>: compare with baseline and generate reports (--json)

--update <path>: scan and refresh baseline (--json)

--status <path>: CI-focused integrity status (--json)

-- <path>: strict (--reports, --json)

--watch <path>: inter (--interval N, --cycles N, --reports, --fail-fast, --json)

--doctor: en and storage health checks (--fix, --json)

--guard: security-focused hardening and baseline integrity checks (--fix, --json)

--list-baseline: list tracked baseline entries (--limit N, --json)

--show-baseline <path>: inspect one baseline entry (--json)

--purge-reports: report retention cleanup (--days N, --all, --dry-run)

Utility Commands

--export-baseline <file> (--o)

--import-baseline <file> (--force)

--tail-log (--lines N)

--report-index (--type all|cli|html|json|csv, --limit N, --json)

--prompt-mode (--target, --interval, --cycles, --reports, --report-formats, --strict, --hash-only, --quiet, --no-advice)

--set-destination <path> (persist report/log/baseline destination for future runs)

--show-destination (--json, --quiet)

-- (--json)

--about

--explain

--help

--output-root <path> (one-run o on operational commands)

Prompt-only keywords:

banner (clears screen, then prints banner)

clear (clears the console)

exit or Ctrl+C (lea mode)

Exit Codes

0: success / clean state

1: usage or argument error

2: integrity changes detected

3: baseline missing

4: baseline target mismatch

5: operation failed

Output Layout

Sentinel-C writes into sentinel-c-logs/ under the binary directory by default.
You can o destination per command using --output-root <path>, persist it
with --set-destination <path>, or set SENTINEL_ROOT.

sentinel-c-logs/data/.sentinel-baseline

sentinel-c-logs/data/.sentinel-baseline.seal

sentinel-c-logs/logs/sentinel-c_acti<YYYYMMDD_HHMMSS_mmm>.log

sentinel-c-logs/reports/cli/sentinel-c_integrity_cli_report_<YYYYMMDD_HHMMSS_mmm>.txt

sentinel-c-logs/reports/html/sentinel-c_integrity_html_report_<YYYYMMDD_HHMMSS_mmm>.html

sentinel-c-logs/reports/json/sentinel-c_integrity_json_report_<YYYYMMDD_HHMMSS_mmm>.json

sentinel-c-logs/reports/css<YYYYMMDD_HHMMSS_mmm>.csv

Terminal summaries print absolute output paths for easy na.

Operational Notes (Important Corners)

Baseline is bound to its initialized target root path.

Scanning a different path with an existing baseline returns target mismatch (4).

Replacing an existing baseline requires --init <path> --force.

--status, --, and --watch return 2 when drift is detected.

Use --json for machine pipelines; use CLI/HTML for analyst review.

Project Layout

Documentation

docs/Usage.txt: plain-text usage guide

termux-support/Setup.txt: plain-text Termux setup guide

termux-support/Usage.txt: plain-text Termux usage guide

SETUP.md: build/install instructions

ARCHITECTURE.md: module boundaries, data flow, concurrency model

building-scripts/: automated platform build scripts with error handling

License

MIT License

项目信息

开发语言：C++

Star 数：4

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Sentinel-C is a modular security testing framework for safe stress testing, network analysis, and resilience evaluation. Designed for learners and professionals, it emphasizes transparency, safety controls, and real-world performance insights.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。

登录后才能参与讨论

下载链接

会员才能下载

登录后开通会员

同分类推荐

暂无同类资源

资源标题	Sentinel-C - Sentinel-C is a modular security testing framework
所属分类	防护思路
发布作者	admin
发布时间	2026-10-06 00:16:24
下载权限	免费下载
附件数量	2 个下载链接
浏览次数	299
讨论数量	0
主题状态	正常讨论中