Skip to content

QUICK_REFERENCE.md

Latest commit

 

History

History
99 lines (77 loc) · 2.35 KB

QUICK_REFERENCE.md

File metadata and controls

99 lines (77 loc) · 2.35 KB

🎯 Quick Reference Card

🔑 LOGIN CREDENTIALS

📊 Grafana:    http://localhost:3001
   Username:   admin
   Password:   sentinelprime

🕸️ Neo4j:     http://localhost:7474  
   Connect:    neo4j://localhost:7687
   Username:   neo4j
   Password:   sentinelprime

🌐 API Docs:   http://localhost:8000/docs
   Auth:       None needed

🚀 Quick Commands

# Send test events (all 3 layers)
./scripts/quick-test.sh

# Check system status  
./scripts/status.sh

# View logs
docker logs -f sentinel-control-plane

# Run attack simulation
python3 experiments/lateral_movement.py

# Check API health
curl http://localhost:8000/health

# View event stats
curl http://localhost:8000/api/v1/telemetry/stats | jq

📊 What to Do in Each Tool

Grafana (http://localhost:3001)

  1. Login with admin / sentinelprime
  2. Click ⚙️ → Data Sources → Add data source
  3. Select "Prometheus"
  4. URL: http://prometheus:9090
  5. Click "Save & Test"
  6. Go to + → Create → Dashboard
  7. Add panel and query: up{job="sentinel-control-plane"}

Neo4j (http://localhost:7474)

  1. Open browser to http://localhost:7474
  2. Connect URL: neo4j://localhost:7687
  3. Username: neo4j, Password: sentinelprime
  4. Click "Connect"
  5. Try these queries: 
    // View everything (I've added sample data!)
MATCH (n)-[r]->(m) RETURN n,r,m LIMIT 50;

// Find high-risk entities
MATCH (n) WHERE n.risk_score > 0.7 RETURN n;

API Docs (http://localhost:8000/docs)

  1. Already open - no login needed
  2. Try /api/v1/telemetry/edr - click "Try it out"
  3. Use this test data: 
    {
  "source": "edr",
  "event_type": "process_create",
  "entity_id": "host-001",
  "host_id": "host-001",
  "severity": "high",
  "process_name": "suspicious.exe"
}

🎯 First Steps

  1. Login to Grafana → admin/sentinelprime
  2. Login to Neo4j → neo4j/sentinelprime
  3. Send test events → ./scripts/quick-test.sh
  4. View API → http://localhost:8000/docs

⚠️ Kibana Not Working?

Reason: Elasticsearch needs more Docker memory Solution: You don't need it! Use Grafana instead:

  • Grafana = Dashboards & Visualization ✅
  • Neo4j = Attack Graphs ✅
  • API = Direct access to data ✅

💾 Save This File!

Keep this file handy for quick reference. All credentials are in: CREDENTIALS.md