dylanpatriarchi/argus

Argus. A minimal, educational EDR / endpoint monitor written in Nim. It collects process, file, and network telemetry, normalizes it, and runs a rule-based detection engine with MITRE ATT&CK mapping. Read-only and defensive by design.

语言：Nim · GitHub 星标：7 · Fork：0

话题：blue-team · defensive-security · detection-engineering · edr · educational · endpoint-detection · endpoint-security · learning-project

在 GitHub 上查看原仓库