MayOne Security Framework
AI-powered network intrusion detection and response framework for Windows
Overview
MayOne Security Framework is a lightweight, AI‑driven solution for real‑time network traffic analysis, anomaly detection, and automated response on Windows systems. It combines machine learning models with rule‑based heuristics to identify and mitigate intrusions (e.g., port scans, brute force attempts, malware C2 traffic) with minimal false positives.
Features
- Real‑time packet capture – uses WinPcap/Npcap to monitor live traffic.
- AI detection engine – pre‑trained model (isolation forest / autoencoder) for anomaly scoring.
- Signature‑based rules – complementary Snort‑compatible rule set.
- Automated response – block IPs via Windows Firewall, kill malicious processes, or trigger custom scripts.
- Dashboard (optional) – simple CLI or GUI to view alerts.
- Low resource usage – designed to run on endpoints or small servers.
Installation
Prerequisites
- Windows 10 / 11 / Server 2019+
- Npcap (loopback capture is optional)
- Python 3.9+ (if running from source)
Download the model / framework
git lfs install
git clone https://huggingface.co/theghostcmd/MayOne-Security-Framework
cd MayOne-Security-Framework
pip install -r requirements.txt
python main.py