MemScan-EDR/README.md

<div align="center">

[![.NET 8](https://img.shields.io/badge/.NET-8.0-purple.svg)](https://dotnet.microsoft.com/)
[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](LICENSE)
[![Platform: Windows](https://img.shields.io/badge/Platform-Windows%2010%2F11-lightgrey.svg)](https://www.microsoft.com/windows)

<br>

<a href="README_CN.md"><img src="https://img.shields.io/badge/中文文档-点击查看-red?style=for-the-badge&logo=markdown" height="40"></a>
&nbsp;&nbsp;
<a href="README_EN.md"><img src="https://img.shields.io/badge/English_Docs-Click_to_View-blue?style=for-the-badge&logo=markdown" height="40"></a>

</div>

<br>

# MemScan-EDR

> **Memory-Focused Windows Endpoint Detection & Response (EDR)**
> **内存专项的 Windows 终端威胁检测与响应工具**

A lightweight EDR tool that scans running processes, inspects memory for shellcode/injection/C2 patterns, and uses AI to classify threats in real time.

轻量级 EDR 工具，扫描运行中进程内存中的恶意特征，利用 AI 实时分类威胁。

<br>

<div align="center">

| [📖 中文文档](README_CN.md) | [📖 English Docs](README_EN.md) |
|:---:|:---:|

</div>

---

## Quick Preview / 快速预览

| Dashboard 仪表盘 | Scan 扫描 | Settings 设置 |
|:---:|:---:|:---:|
| Real-time risk stats | Process-level scan log | Multi-provider AI config |

---

## One-Line Build / 一行编译

```powershell
dotnet publish src-csharp\MemScanEDR\MemScanEDR.csproj -c Release -r win-x64 --self-contained true -p:PublishSingleFile=true -o publish
```

---

## License / 许可证

MIT — see [LICENSE](LICENSE)