Press any key or click to skip

Back to projects

Sentinel Agent

GoWindowsSecuritySQLite
Source

Overview

Sentinel Agent is a modular Windows endpoint agent for offline-first telemetry collection and policy enforcement. Built in Go for minimal footprint.

Features

  • Runs as a Windows Service via kardianos/service
  • Collects system info, process telemetry
  • SQLite storage at %PROGRAMDATA%/SentinelAgent/
  • YAML-based policies for process blocking
  • Syncs with remote gateway for event delivery

Architecture

  • Modular design separating detection, persistence, and comms
  • Local-first storage for network resilience
  • YAML rules for transparent enforcement

Tech Stack

Go SQLite Windows Services YAML Policies