What you'll build: Windows route/interface observation for the agent, mirroring the Linux collector contract.
Where: agent/collectors/ (new Windows collector using GetIpForwardTable2/route print style sources).
Expected behavior: interface + default-route observations as DETECTED evidence; deterministic output from fixtures; fail-closed on missing data.
How to test: unit tests with recorded fixture data; CI must not require a real Windows network.
Mentor: @DBarr3 · read docs/evidence-model.md first
What you'll build: Windows route/interface observation for the agent, mirroring the Linux collector contract.
Where:
agent/collectors/(new Windows collector usingGetIpForwardTable2/route printstyle sources).Expected behavior: interface + default-route observations as
DETECTEDevidence; deterministic output from fixtures; fail-closed on missing data.How to test: unit tests with recorded fixture data; CI must not require a real Windows network.
Mentor: @DBarr3 · read
docs/evidence-model.mdfirst