Move TODO section to before Disclaimer
This commit is contained in:
Huang-158
parent
ae75f030ae
commit
88b2123574
36
README.md
36
README.md
@ -17,24 +17,6 @@ MemScan-EDR 扫描所有运行中的进程，检查内存中的 Shellcode / 注
|
|||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## 待办事项
|
|
||||||
|
|
||||||
- [ ] 1. YARA 规则文件加载与匹配引擎
|
|
||||||
- [ ] 2. 网络连接 PID 关联（TCP 连接→进程）
|
|
||||||
- [ ] 3. 内存 Dump 与 PE 结构解析
|
|
||||||
- [ ] 4. 审计日志持久化
|
|
||||||
- [ ] 5. 报告导出（PDF / HTML）
|
|
||||||
- [ ] 6. 定时扫描调度
|
|
||||||
- [ ] 7. 高危进程一键终止
|
|
||||||
- [ ] 8. 隐藏进程检测（EPROCESS 链表）
|
|
||||||
- [x] 9. 多 AI 提供商 + 防误报（v1.2）
|
|
||||||
- [x] 10. CE-MCP 自动启动（v1.1）
|
|
||||||
- [x] 11. 中英文界面切换（v1.1）
|
|
||||||
- [x] 12. 12 条内置内存签名（v1.0）
|
|
||||||
- [x] 13. WPF 白色主题界面（v1.0）
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## 功能特性
|
## 功能特性
|
||||||
|
|
||||||
### 核心能力
|
### 核心能力
|
||||||
@ -191,6 +173,24 @@ MemScan-EDR/
|
|||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
|
## 待办事项
|
||||||
|
|
||||||
|
- [ ] 1. YARA 规则文件加载与匹配引擎
|
||||||
|
- [ ] 2. 网络连接 PID 关联（TCP 连接→进程）
|
||||||
|
- [ ] 3. 内存 Dump 与 PE 结构解析
|
||||||
|
- [ ] 4. 审计日志持久化
|
||||||
|
- [ ] 5. 报告导出（PDF / HTML）
|
||||||
|
- [ ] 6. 定时扫描调度
|
||||||
|
- [ ] 7. 高危进程一键终止
|
||||||
|
- [ ] 8. 隐藏进程检测（EPROCESS 链表）
|
||||||
|
- [x] 9. 多 AI 提供商 + 防误报（v1.2）
|
||||||
|
- [x] 10. CE-MCP 自动启动（v1.1）
|
||||||
|
- [x] 11. 中英文界面切换（v1.1）
|
||||||
|
- [x] 12. 12 条内置内存签名（v1.0）
|
||||||
|
- [x] 13. WPF 白色主题界面（v1.0）
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
## 声明
|
## 声明
|
||||||
|
|
||||||
> 本项目与 Cheat Engine、其原作者 Dark Byte 以及任何 AI 提供商（OpenAI、Anthropic 等）无任何关联。
|
> 本项目与 Cheat Engine、其原作者 Dark Byte 以及任何 AI 提供商（OpenAI、Anthropic 等）无任何关联。
|
||||||
|
|||||||
36
README_EN.md
36
README_EN.md
@ -17,24 +17,6 @@ MemScan-EDR scans all running processes, inspects memory for shellcode/injection
|
|||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
## TODO
|
|
||||||
|
|
||||||
- [ ] 1. YARA rule file loading & matching engine
|
|
||||||
- [ ] 2. TCP connection PID association
|
|
||||||
- [ ] 3. Memory dump & PE structure analysis
|
|
||||||
- [ ] 4. Audit log persistence
|
|
||||||
- [ ] 5. Report export (PDF / HTML)
|
|
||||||
- [ ] 6. Scheduled scan
|
|
||||||
- [ ] 7. One-click terminate high-risk processes
|
|
||||||
- [ ] 8. Hidden process detection (EPROCESS walk)
|
|
||||||
- [x] 9. Multi AI provider + anti-false-positive (v1.2)
|
|
||||||
- [x] 10. CE-MCP auto-start (v1.1)
|
|
||||||
- [x] 11. Chinese/English UI toggle (v1.1)
|
|
||||||
- [x] 12. 12 built-in memory signatures (v1.0)
|
|
||||||
- [x] 13. WPF white-theme UI (v1.0)
|
|
||||||
|
|
||||||
---
|
|
||||||
|
|
||||||
## Features
|
## Features
|
||||||
|
|
||||||
### Core Capabilities
|
### Core Capabilities
|
||||||
@ -188,6 +170,24 @@ MemScan-EDR/
|
|||||||
|
|
||||||
---
|
---
|
||||||
|
|
||||||
|
## TODO
|
||||||
|
|
||||||
|
- [ ] 1. YARA rule file loading & matching engine
|
||||||
|
- [ ] 2. TCP connection PID association
|
||||||
|
- [ ] 3. Memory dump & PE structure analysis
|
||||||
|
- [ ] 4. Audit log persistence
|
||||||
|
- [ ] 5. Report export (PDF / HTML)
|
||||||
|
- [ ] 6. Scheduled scan
|
||||||
|
- [ ] 7. One-click terminate high-risk processes
|
||||||
|
- [ ] 8. Hidden process detection (EPROCESS walk)
|
||||||
|
- [x] 9. Multi AI provider + anti-false-positive (v1.2)
|
||||||
|
- [x] 10. CE-MCP auto-start (v1.1)
|
||||||
|
- [x] 11. Chinese/English UI toggle (v1.1)
|
||||||
|
- [x] 12. 12 built-in memory signatures (v1.0)
|
||||||
|
- [x] 13. WPF white-theme UI (v1.0)
|
||||||
|
|
||||||
|
---
|
||||||
|
|
||||||
## Disclaimer
|
## Disclaimer
|
||||||
|
|
||||||
> This project is not affiliated with Cheat Engine, Dark Byte, or any AI provider (OpenAI, Anthropic, etc.).
|
> This project is not affiliated with Cheat Engine, Dark Byte, or any AI provider (OpenAI, Anthropic, etc.).
|
||||||
|
|||||||
Loading…
Reference in New Issue
Block a user