56 lines
1.6 KiB
Markdown
56 lines
1.6 KiB
Markdown
<div align="center">
|
|
|
|
[](https://dotnet.microsoft.com/)
|
|
[](LICENSE)
|
|
[](https://www.microsoft.com/windows)
|
|
|
|
<br>
|
|
|
|
<a href="README_CN.md"><img src="https://img.shields.io/badge/中文文档-点击查看-red?style=for-the-badge&logo=markdown" height="40"></a>
|
|
|
|
<a href="README_EN.md"><img src="https://img.shields.io/badge/English_Docs-Click_to_View-blue?style=for-the-badge&logo=markdown" height="40"></a>
|
|
|
|
</div>
|
|
|
|
<br>
|
|
|
|
# MemScan-EDR
|
|
|
|
> **Memory-Focused Windows Endpoint Detection & Response (EDR)**
|
|
> **内存专项的 Windows 终端威胁检测与响应工具**
|
|
|
|
A lightweight EDR tool that scans running processes, inspects memory for shellcode/injection/C2 patterns, and uses AI to classify threats in real time.
|
|
|
|
轻量级 EDR 工具，扫描运行中进程内存中的恶意特征，利用 AI 实时分类威胁。
|
|
|
|
<br>
|
|
|
|
<div align="center">
|
|
|
|
| [📖 中文文档](README_CN.md) | [📖 English Docs](README_EN.md) |
|
|
|:---:|:---:|
|
|
|
|
</div>
|
|
|
|
---
|
|
|
|
## Quick Preview / 快速预览
|
|
|
|
| Dashboard 仪表盘 | Scan 扫描 | Settings 设置 |
|
|
|:---:|:---:|:---:|
|
|
| Real-time risk stats | Process-level scan log | Multi-provider AI config |
|
|
|
|
---
|
|
|
|
## One-Line Build / 一行编译
|
|
|
|
```powershell
|
|
dotnet publish src-csharp\MemScanEDR\MemScanEDR.csproj -c Release -r win-x64 --self-contained true -p:PublishSingleFile=true -o publish
|
|
```
|
|
|
|
---
|
|
|
|
## License / 许可证
|
|
|
|
MIT — see [LICENSE](LICENSE)
|