Codebase: https://github.com/youssefnoob003/TP-RT4
This project implements a sophisticated Detect-Audit-Remediate cycle using mobile agents that autonomously migrate across distributed network nodes. The system monitors CPU, memory, and network metrics, intelligently identifies suspicious processes, and automatically terminates threats while maintaining a complete audit trail.
Key Features
- Distributed Monitoring: Lightweight agents deployed on client nodes for continuous telemetry collection
- Intelligent Anomaly Detection: Centralized analysis with configurable thresholds for resource abuse detection
- Mobile Code Execution: Autonomous agents that migrate to suspicious nodes for on-site inspection and remediation
- Process Auditing: Whitelist-based filtering to distinguish legitimate system processes from threats
- Real-time Dashboard: Web-based visualization of metrics, process analysis, and remediation actions
- Forensic Logging: Complete audit trail of all monitoring events, scout reports, and killer actions in SQLite database