Initial commit: LOGAR edge-thin log analysis system with OpenPGP encryption, authenticated TCP sockets, 4-run persistence rule, Hermes reporting, and modular shippables

2026-09-03 21:05:28 +02:00
commit c5d364b289
26 changed files with 2667 additions and 0 deletions
@@ -0,0 +1,31 @@
+# LOGAR Windows Edge Forwarder
+
+Lightweight edge log forwarder for Windows servers.
+
+## Features
+- **Zero Local State**: No local database or state tracking. Forwarder simply scans recent logs and streams candidates.
+- **Edge Noise Stripping**: Strips conversational/informational noise (INFO, DEBUG, Audit) at the source.
+- **End-to-End OpenPGP Encryption**: Encrypts logs using the server's public key so that only the server can decrypt them.
+- **Authenticated TCP Socket**: Connects directly via raw TCP framing with token verification.
+- **No GPG Binary Required**: Pure-Python cryptography (`pgpy` + `cryptography`).
+
+## Installation
+```powershell
+python -m pip install -r requirements.txt
+```
+
+## Configuration
+Place the `client_config.json` generated by the server (`Server.py --create-client-config`) in the same directory as `Win_Client.py`.
+
+## Running the Forwarder
+```powershell
+python Win_Client.py --hours 6
+```
+
+## Scheduled Task Deployment
+To run periodically via Windows Task Scheduler (e.g., every 3 hours):
+```powershell
+$Action = New-ScheduledTaskAction -Execute "python.exe" -Argument "C:\LOGAR\Win_Client.py --hours 6" -WorkingDirectory "C:\LOGAR"
+$Trigger = New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Hours 3)
+Register-ScheduledTask -TaskName "LOGAR_Windows_Forwarder" -Action $Action -Trigger $Trigger -Description "LOGAR Edge Forwarder"
+```