What problem does it solve? Operating a self-hosted TinySocs SIEM on a real Windows host involves a maze of installer internals, NSSM-wrapped services, ProgramData paths, scheduled tasks, and retention policies — this Skill gives you verified, line-cited ground truth so you can install, run, and troubleshoot a pilot or customer host without guessing. ## Core Features & Use Cases - Installer and service operations: Explains the Inno Setup flow (Quickstart.iss), the TinySocs.Installer.psm1 module with 210 functions, and the NSSM-wrapped services (TinySocsOpenSearch, TinySocsAgent, TinySocsNode, TinySocsAssistant) including ports, dependencies, and restart behavior. - Filesystem and log navigation: Maps the full C:\ProgramData\TinySocs layout, every log file location, scheduled tasks, ISM retention policies, and the 60-second rule hot-reload behavior. - Upgrade, uninstall, and VM deployment: Documents upgrade backup behavior, the remove_on_uninstall.flag data-wipe opt-in, and the two-script deploy-bundle pipeline for hot-swapping an agent and rules.yml on a validation VM. - Use Case: You are standing up a pilot TinySocs host and the dashboard is not responding after install — use this Skill to learn that OpenSearch cold start can take up to 300 seconds on port 9201 and where to find the postinstall logs before assuming failure. ## Quick Start Ask the assistant to walk you through installing TinySocs on a Windows VM and verifying which services and scheduled tasks should be running afterward.
