Connectors

Wazuh endpoint adapter and Zeek/Suricata network parsers. High-impact endpoint actions stay denied until the policy engine approves them.