Adir Shitrit fe3e5e3b21 add configuration system with TOML support

2025-11-08 12:20:53 +02:00

..

anomaly.rs

add statistical anomaly detection for process analysis

2025-11-08 11:47:15 +02:00

config.rs

add configuration system with TOML support

2025-11-08 12:20:53 +02:00

detection.rs

integrate new detection modules into main engine

2025-11-08 11:47:39 +02:00

ebpf.rs

add eBPF kernel tracing for Linux process monitoring

2025-11-08 11:47:58 +02:00

error.rs

add structured error handling with thiserror

2025-11-08 11:07:48 +02:00

evasion.rs

add anti-analysis evasion detection capabilities

2025-11-08 11:47:27 +02:00

hollowing.rs

feat: implement comprehensive process hollowing detection

2025-11-08 11:16:42 +02:00

hooks.rs

feat: add Windows hook injection detection (SetWindowsHookEx)

2025-11-08 11:13:14 +02:00

lib.rs

add configuration system with TOML support

2025-11-08 12:20:53 +02:00

memory.rs

fix: handle system process PIDs in memory enumeration

2025-11-08 11:10:29 +02:00

process.rs

add process path resolution for better identification

2025-11-08 11:08:21 +02:00

shellcode.rs

feat: implement sophisticated shellcode pattern detection

2025-11-08 11:15:12 +02:00

streaming.rs

implement real-time event streaming and alerting

2025-11-08 11:47:33 +02:00

testing.rs

implement comprehensive testing framework for validation

2025-11-08 11:48:04 +02:00

thread.rs

add creation_time field to ThreadInfo struct

2025-11-08 11:10:12 +02:00

threat_intel.rs

implement threat intelligence lookup and IOC matching

2025-11-08 11:47:21 +02:00