# OfficeCom Sentinel Architecture

## Goal

OfficeCom Sentinel is a Windows endpoint client that:

- runs on every monitored device
- reads local attack telemetry and optional local vulnerability exports
- writes NinjaOne device custom fields locally
- uploads signed JSON reports to n8n
- receives updates through NinjaOne tasks from Gitea-hosted releases

## Current Model

The repository now keeps only the client-side architecture:

- endpoint scan and correlation
- local NinjaOne field publishing
- optional n8n upload
- packaged ZIP release flow for NinjaOne deployment

## Removed Model

The following older pieces are intentionally no longer part of the repo:

- share-based organization aggregation
- dedicated server-side collector package
- server-side NinjaOne organization field updater