1.6 KiB
1.6 KiB
MemScan-EDR
Memory-Focused Windows Endpoint Detection & Response (EDR) 内存专项的 Windows 终端威胁检测与响应工具
A lightweight EDR tool that scans running processes, inspects memory for shellcode/injection/C2 patterns, and uses AI to classify threats in real time.
轻量级 EDR 工具，扫描运行中进程内存中的恶意特征，利用 AI 实时分类威胁。
Quick Preview / 快速预览
| Dashboard 仪表盘 | Scan 扫描 | Settings 设置 |
|---|---|---|
| Real-time risk stats | Process-level scan log | Multi-provider AI config |
One-Line Build / 一行编译
dotnet publish src-csharp\MemScanEDR\MemScanEDR.csproj -c Release -r win-x64 --self-contained true -p:PublishSingleFile=true -o publish
License / 许可证
MIT — see LICENSE