Metadata-Version: 2.4
Name: sentinelioc
Version: 0.3.2
Summary: Defensive IOC scanner for local host artifact correlation
Author: Apel Mahmud
License-Expression: MIT
Project-URL: Homepage, https://github.com/cseapel/sentinelioc
Project-URL: Repository, https://github.com/cseapel/sentinelioc
Project-URL: Issues, https://github.com/cseapel/sentinelioc/issues
Keywords: cybersecurity,ioc,threat-intelligence,detection,blue-team,yara
Classifier: Programming Language :: Python :: 3
Classifier: Programming Language :: Python :: 3.11
Classifier: Operating System :: OS Independent
Classifier: Topic :: Security
Classifier: Environment :: Console
Requires-Python: >=3.11
Description-Content-Type: text/markdown
License-File: LICENSE
Requires-Dist: typer>=0.12.3
Requires-Dist: rich>=13.7.1
Requires-Dist: psutil>=5.9.8
Requires-Dist: pydantic>=2.7.1
Requires-Dist: flask>=3.0.0
Provides-Extra: yara
Requires-Dist: yara-python>=4.5.0; extra == "yara"
Dynamic: license-file

# SentinelIOC 🛡️

![Python](https://img.shields.io/badge/python-3.11+-blue)
![License](https://img.shields.io/badge/license-MIT-green)
![Status](https://img.shields.io/badge/status-active-success)
![Security](https://img.shields.io/badge/focus-cybersecurity-red)

**SentinelIOC** is a defensive cybersecurity tool designed to detect threats on a local system using Indicators of Compromise (IOCs), YARA rules, and persistence analysis.

---

## 👨‍💻 Author

**Apel Mahmud**  
GitHub: https://github.com/cseapel  

---

## 🚀 Features

### 🔍 Detection Engine
- File scanning (SHA256 hashing)
- Process scanning
- Startup & persistence detection
- Windows autorun registry checks

### 🧠 Threat Intelligence
- IOC ingestion (JSON, CSV, feeds)
- IOC deduplication
- Expiration filtering
- Confidence-based scoring

### 🧬 Advanced Detection
- YARA rule scanning
- Real-time monitoring (live alerts)

### 📊 Reporting
- CLI output (Rich)
- JSON reports
- HTML dashboard reports
- Web dashboard (Flask)
- Scan history tracking

### ⚙️ Performance & Control
- Directory exclusions
- File size limits
- Scan filtering

---

## 📦 Installation

```bash
pip install sentinelioc
