Update README.md

README.md

@@ -1,39 +1,45 @@
+---
+language: en
+license: mit
+tags:
+- network-security
+- intrusion-detection
+- windows
+- cybersecurity
+- ai
+- anomaly-detection
+library_name: custom
+pipeline_tag: text-classification
+---
+
 # MayOne Security Framework
 
-**AI‑powered Intrusion Detection & Response for Windows**
+**AI-powered network intrusion detection and response framework for Windows**
+
+## Overview
 
-![Dashboard Preview](doc/dashboard.png) 
+MayOne Security Framework is a lightweight, AI‑driven solution for real‑time network traffic analysis, anomaly detection, and automated response on Windows systems. It combines machine learning models with rule‑based heuristics to identify and mitigate intrusions (e.g., port scans, brute force attempts, malware C2 traffic) with minimal false positives.
 
 ## Features
 
-- Real‑time packet capture (Scapy)
-- Rule‑based threat detection (port scan, brute force, DDoS, bursts)
-- AI anomaly detection (Isolation Forest) – learns normal traffic
-- Risk scoring (0–100) with threat levels: LOW, MEDIUM, HIGH, CRITICAL
-- Automatic IP blocking via Windows Firewall (inbound+outbound)
-- SQLite database for events, threats, blocked IPs, reports
-- Live Flask dashboard with:
-  - Traffic statistics
-  - Protocol distribution & top ports charts
-  - Recent threats table
-  - Manual IP block/unblock
-- Geo‑IP blocking (optional, MaxMind GeoLite2)
-- Scheduled & emergency PDF reports (with logo watermark)
-- PCAP export (full buffer)
-- Multithreaded, thread‑safe, low CPU usage
-
-## Requirements
-
-- Windows 10/11 (or Windows Server)
-- Python 3.10 or higher
-- Npcap (with WinPcap API compatibility) – [Download](https://npcap.com)
-- Administrator privileges (for sniffing and firewall changes)
+- **Real‑time packet capture** – uses WinPcap/Npcap to monitor live traffic.
+- **AI detection engine** – pre‑trained model (isolation forest / autoencoder) for anomaly scoring.
+- **Signature‑based rules** – complementary Snort‑compatible rule set.
+- **Automated response** – block IPs via Windows Firewall, kill malicious processes, or trigger custom scripts.
+- **Dashboard** (optional) – simple CLI or GUI to view alerts.
+- **Low resource usage** – designed to run on endpoints or small servers.
 
 ## Installation
 
-1. Clone the repository:
-   ```bash
-   git clone https://github.com/yourusername/MayOne-Security-Framework.git
-   cd MayOne-Security-Framework
-   pip install -r requirements.txt
-   python main.py
+### Prerequisites
+- Windows 10 / 11 / Server 2019+
+- [Npcap](https://npcap.com/) (loopback capture is optional)
+- Python 3.9+ (if running from source)
+
+### Download the model / framework
+```bash
+git lfs install
+git clone https://huggingface.co/theghostcmd/MayOne-Security-Framework
+cd MayOne-Security-Framework
+pip install -r requirements.txt
+python main.py