From 08ba83b110afd4ef11ed975907743c0b8911580a Mon Sep 17 00:00:00 2001
From: Adir Shitrit <adirshit212@gmail.com>
Date: Fri, 7 Nov 2025 18:05:51 +0200
Subject: [PATCH] add build documentation

---
 BUILD.md | 36 ++++++++++++++++++++++++++++++++++++
 1 file changed, 36 insertions(+)
 create mode 100644 BUILD.md

diff --git a/BUILD.md b/BUILD.md
new file mode 100644
index 0000000..817facb
--- /dev/null
+++ b/BUILD.md
@@ -0,0 +1,36 @@
+# Build Instructions
+
+## Prerequisites
+
+### Windows
+- Rust toolchain (MSVC target)
+- Visual Studio Build Tools with C++ workload
+- Windows SDK
+
+Install via:
+```powershell
+rustup default stable-msvc
+```
+
+### Linux
+- Rust toolchain
+- GCC/Clang
+- libelf-dev (for eBPF)
+
+### macOS
+- Rust toolchain
+- Xcode Command Line Tools
+
+## Building
+
+```bash
+cargo build --release
+```
+
+## Running
+
+```bash
+cargo run --bin ghost-cli
+```
+
+Note: Requires elevated privileges for full process memory access.