diff --git a/README.md b/README.md index be6d487..8772f27 100644 --- a/README.md +++ b/README.md @@ -17,24 +17,6 @@ MemScan-EDR 扫描所有运行中的进程,检查内存中的 Shellcode / 注 --- -## 待办事项 - -- [ ] 1. YARA 规则文件加载与匹配引擎 -- [ ] 2. 网络连接 PID 关联(TCP 连接→进程) -- [ ] 3. 内存 Dump 与 PE 结构解析 -- [ ] 4. 审计日志持久化 -- [ ] 5. 报告导出(PDF / HTML) -- [ ] 6. 定时扫描调度 -- [ ] 7. 高危进程一键终止 -- [ ] 8. 隐藏进程检测(EPROCESS 链表) -- [x] 9. 多 AI 提供商 + 防误报(v1.2) -- [x] 10. CE-MCP 自动启动(v1.1) -- [x] 11. 中英文界面切换(v1.1) -- [x] 12. 12 条内置内存签名(v1.0) -- [x] 13. WPF 白色主题界面(v1.0) - ---- - ## 功能特性 ### 核心能力 @@ -191,6 +173,24 @@ MemScan-EDR/ --- +## 待办事项 + +- [ ] 1. YARA 规则文件加载与匹配引擎 +- [ ] 2. 网络连接 PID 关联(TCP 连接→进程) +- [ ] 3. 内存 Dump 与 PE 结构解析 +- [ ] 4. 审计日志持久化 +- [ ] 5. 报告导出(PDF / HTML) +- [ ] 6. 定时扫描调度 +- [ ] 7. 高危进程一键终止 +- [ ] 8. 隐藏进程检测(EPROCESS 链表) +- [x] 9. 多 AI 提供商 + 防误报(v1.2) +- [x] 10. CE-MCP 自动启动(v1.1) +- [x] 11. 中英文界面切换(v1.1) +- [x] 12. 12 条内置内存签名(v1.0) +- [x] 13. WPF 白色主题界面(v1.0) + +--- + ## 声明 > 本项目与 Cheat Engine、其原作者 Dark Byte 以及任何 AI 提供商(OpenAI、Anthropic 等)无任何关联。 diff --git a/README_EN.md b/README_EN.md index bc870a7..f7b7659 100644 --- a/README_EN.md +++ b/README_EN.md @@ -17,24 +17,6 @@ MemScan-EDR scans all running processes, inspects memory for shellcode/injection --- -## TODO - -- [ ] 1. YARA rule file loading & matching engine -- [ ] 2. TCP connection PID association -- [ ] 3. Memory dump & PE structure analysis -- [ ] 4. Audit log persistence -- [ ] 5. Report export (PDF / HTML) -- [ ] 6. Scheduled scan -- [ ] 7. One-click terminate high-risk processes -- [ ] 8. Hidden process detection (EPROCESS walk) -- [x] 9. Multi AI provider + anti-false-positive (v1.2) -- [x] 10. CE-MCP auto-start (v1.1) -- [x] 11. Chinese/English UI toggle (v1.1) -- [x] 12. 12 built-in memory signatures (v1.0) -- [x] 13. WPF white-theme UI (v1.0) - ---- - ## Features ### Core Capabilities @@ -188,6 +170,24 @@ MemScan-EDR/ --- +## TODO + +- [ ] 1. YARA rule file loading & matching engine +- [ ] 2. TCP connection PID association +- [ ] 3. Memory dump & PE structure analysis +- [ ] 4. Audit log persistence +- [ ] 5. Report export (PDF / HTML) +- [ ] 6. Scheduled scan +- [ ] 7. One-click terminate high-risk processes +- [ ] 8. Hidden process detection (EPROCESS walk) +- [x] 9. Multi AI provider + anti-false-positive (v1.2) +- [x] 10. CE-MCP auto-start (v1.1) +- [x] 11. Chinese/English UI toggle (v1.1) +- [x] 12. 12 built-in memory signatures (v1.0) +- [x] 13. WPF white-theme UI (v1.0) + +--- + ## Disclaimer > This project is not affiliated with Cheat Engine, Dark Byte, or any AI provider (OpenAI, Anthropic, etc.).