Remove legacy AttackTracer repo content

docs/ocsentinel-deployment.md

@@ -0,0 +1,67 @@
+# OfficeCom Sentinel Deployment
+
+## Goal
+
+Deploy and update the endpoint client through NinjaOne while hosting release artifacts in Gitea.
+
+## Release Assets
+
+Each Gitea release should publish:
+
+- `OCSentinelClient-win-x64.zip`
+- `OCSentinelClient-win-x64.zip.sha256`
+- `version.json`
+
+Build these locally with:
+
+```powershell
+powershell -ExecutionPolicy Bypass -File .\build\build-client-package.ps1
+powershell -ExecutionPolicy Bypass -File .\build\build-release-manifest.ps1 `
+  -ArtifactUrl "https://gitea.officecom.cloud/officecom/oc-sentinel/releases/download/v2.0.0/OCSentinelClient-win-x64.zip"
+```
+
+## Installed Layout
+
+- `app\OCSentinelCli.exe`
+- `scripts\run-ocsentinel.ps1`
+- `scripts\run-ocsentinel-monitor.ps1`
+- `scripts\update-ocsentinel.ps1`
+- `scripts\protect-ocsentinel-secret.ps1`
+- `config\ocsentinel-settings.json`
+- `config\ocsentinel-client.json`
+
+## NinjaOne Tasks
+
+Initial install/update:
+
+```powershell
+& "C:\Program Files\OCSentinel\scripts\update-ocsentinel.ps1" `
+  -ManifestUrl "https://gitea.officecom.cloud/officecom/oc-sentinel/releases/download/v2.0.0/version.json" `
+  -Force
+```
+
+Routine update:
+
+```powershell
+& "C:\Program Files\OCSentinel\scripts\update-ocsentinel.ps1" `
+  -ManifestUrl "https://gitea.officecom.cloud/officecom/oc-sentinel/releases/download/v2.0.0/version.json"
+```
+
+Runtime:
+
+```powershell
+& "C:\Program Files\OCSentinel\scripts\run-ocsentinel-monitor.ps1" `
+  -Mode status `
+  -OutputPath "..\reports\ocsentinel-summary.json"
+```
+
+## Secret Bootstrap
+
+```powershell
+& "C:\Program Files\OCSentinel\scripts\protect-ocsentinel-secret.ps1" `
+  -SecretValue "<shared-ingest-secret>"
+```
+
+This writes:
+
+- `C:\ProgramData\OCSentinel\secrets\ocsentinel-upload-secret.dat`