[](https://dotnet.microsoft.com/)
[](LICENSE)
[](https://www.microsoft.com/windows)
# MemScan-EDR
> **Memory-Focused Windows Endpoint Detection & Response (EDR)**
> **内存专项的 Windows 终端威胁检测与响应工具**
A lightweight EDR tool that scans running processes, inspects memory for shellcode/injection/C2 patterns, and uses AI to classify threats in real time.
轻量级 EDR 工具，扫描运行中进程内存中的恶意特征，利用 AI 实时分类威胁。
| [📖 中文文档](README_CN.md) | [📖 English Docs](README_EN.md) |
|:---:|:---:|
---
## Quick Preview / 快速预览
| Dashboard 仪表盘 | Scan 扫描 | Settings 设置 |
|:---:|:---:|:---:|
| Real-time risk stats | Process-level scan log | Multi-provider AI config |
---
## One-Line Build / 一行编译
```powershell
dotnet publish src-csharp\MemScanEDR\MemScanEDR.csproj -c Release -r win-x64 --self-contained true -p:PublishSingleFile=true -o publish
```
---
## License / 许可证
MIT — see [LICENSE](LICENSE)