SD EDR/RMM
Copyright (c) 2026 SD Tech Solutions

This product is licensed under the GNU Affero General Public License v3.0.
See LICENSE for the full text.

This product includes, bundles, or builds upon third-party work as listed
below. Each item retains its own licence; nothing here is a grant by
SD Tech Solutions over someone else's work.

================================================================================
1. MeshCentral command line tool  (mesh/meshctrl.js)
================================================================================
    Copyright (c) 2018-2022 Intel Corporation
    Author: Ylian Saint-Hilaire
    Licence: Apache License 2.0  --  licenses/Apache-2.0.txt
    Upstream: https://github.com/Ylianst/MeshCentral

    mesh/meshctrl.js is an unmodified copy of the upstream MeshCentral CLI
    client. It is included so this platform can drive a MeshCentral server
    that YOU run.

    MeshCentral itself is NOT included in this distribution. This platform
    talks to a MeshCentral server over its published API; it does not link
    against, embed, or derive from MeshCentral source. Remote desktop is
    MeshCentral's feature, not ours. If you want it, install MeshCentral
    separately -- see INSTALL.md.

================================================================================
2. Sigma detection rules  (app/sigma_rules.json)
================================================================================
    Source:  SigmaHQ/sigma, release tag r2026-07-01
    Licence: Detection Rule License (DRL) 1.1  --  licenses/DRL-1.1.txt
    Upstream: https://github.com/SigmaHQ/sigma

    1,232 rules were compiled from the SigmaHQ ruleset into the JSON form
    this platform's engine consumes. They remain the work of the SigmaHQ
    project and its individual rule authors, who are credited collectively
    here and individually in the upstream repository.

    Each rule keeps its upstream Sigma UUID in the "id" field, so any rule
    in this file can be traced back to its original author and history:

        https://github.com/SigmaHQ/sigma/search?q=<uuid>

    KNOWN GAP: the current importer does not carry the per-rule "author"
    and "references" fields into the compiled JSON. Restoring them is
    tracked in STATUS.md. Until then, attribution is at the ruleset level
    via this notice and the upstream UUID, not per rule.

================================================================================
3. ClamAV
================================================================================
    Licence: GNU GPL v2.0
    Upstream: https://www.clamav.net/

    NOT bundled. The installer asks your operating system's package manager
    to install ClamAV, and the agent then invokes clamd/clamscan as separate
    processes over their own interfaces. No ClamAV code is included in or
    linked into this distribution.

================================================================================
4. Go dependencies (agent)
================================================================================
    github.com/shirou/gopsutil/v3      BSD-3-Clause
    golang.org/x/sys                   BSD-3-Clause
    github.com/go-ole/go-ole           MIT
    github.com/lufia/plan9stats        MIT
    github.com/power-devops/perfstat   MIT
    github.com/shoenig/go-m1cpu        MPL-2.0
    github.com/tklauser/go-sysconf     BSD-3-Clause
    github.com/tklauser/numcpus        Apache-2.0
    github.com/yusufpapurcu/wmi        MIT

    Authoritative list, including transitive dependencies and their full
    licence texts, is agent/go.sum plus:

        cd agent && go mod download && go list -m -json all

================================================================================
5. Node dependencies (mesh CLI shim)
================================================================================
    ws                  MIT
    minimist            MIT
    https-proxy-agent   MIT

================================================================================
6. Python dependencies (server)
================================================================================
    See requirements.txt. All are MIT, BSD, or Apache-2.0 as published on
    PyPI. They are installed by pip at deploy time and are not redistributed
    in this archive.

================================================================================

If you believe your work is included here without correct attribution, that
is a bug and it will be fixed. Open an issue or write to
info@sd-techsolutions.com.
