---
name: vt-monitor
description: >-
  Monitor VT-Sentinel activity from gateway logs. Parses scan events, uploads,
  verdicts, quarantines, blocks, and failures. Returns structured JSON of all
  VT-Sentinel activity since last check.
metadata:
  openclaw:
    emoji: "🛡️"
---

# VT-Sentinel Monitor

Parses the OpenClaw gateway log for all VT-Sentinel activity and returns structured reports.

## Available Tools

### `vt_monitor_check` — Check Recent Activity
Returns all VT-Sentinel events since last check (or last N minutes).

```
vt_monitor_check [minutes]
```

Arguments:
- `minutes` (optional, default: 60) — How far back to look

Output: JSON with categorized events (scans, uploads, verdicts, blocks, quarantines, failures).

### `vt_monitor_tail` — Live Tail
Returns the last N VT-Sentinel log entries.

```
vt_monitor_tail [count]
```

Arguments:
- `count` (optional, default: 50) — Number of recent entries