🔄 状态更新: 如果GitHub页面显示错误,请刷新浏览器或等待几分钟。大型仓库有时需要时间加载。
Modern threat hunting console with integrated AI analysis and real-time monitoring capabilities
Intelligent threat detection interface providing detailed scan results and threat analysis reports
HunterMatrix is a modern intelligent threat hunting platform that combines traditional antivirus scanning engine with advanced AI technologies to provide proactive threat hunting and precise security protection solutions.
- 🔍 Proactive threat search and identification
- 🧠 AI-enhanced threat detection capabilities
- 📊 Automated threat analysis reports
- 💬 Intelligent security assistant and consultation
- 🌓 Smart dark/light mode switching
- 📱 Perfect responsive design
- ⚡ Smooth animations and interactions
- 🎯 Intuitive user experience
- 🔍 Threat Hunting: Proactive scanning, behavior analysis, IOC matching
- 🌐 Network Monitoring: Connection management, threat detection, security events
- 📚 History Management: Hunt records, result analysis, trend statistics
- ⚙️ System Settings: Notification configuration, AI settings, platform management
- 🎨 Frontend: Tailwind CSS 3.x + Native JavaScript
- 🛡️ Security Engine: HunterMatrix Core + AI-enhanced detection
- 📧 Notification System: Email + Matrix instant messaging
- 🔗 Integration Capabilities: RESTful API + WebSocket
- Operating System: macOS, Linux, Windows
- Browser: Chrome 90+, Firefox 88+, Safari 14+
- Python: 3.7+ (for web server)
- HunterMatrix Engine: Latest version
-
Clone Repository
git clone https://github.com/arkCyber/HunterMatrix.git cd HunterMatrix
-
Start Web Interface
# Enter web directory cd web-ui # Start HunterMatrix platform (Recommended) ./start-tailwind.sh # Or start classic version python3 -m http.server 8082
-
Access Platform
- HunterMatrix Version: http://localhost:8083/index-tailwind.html
- Classic Version: http://localhost:8082/index.html
-
Install Dependencies
# macOS brew install python3 # Ubuntu/Debian sudo apt-get install python3 python3-pip # CentOS/RHEL sudo yum install python3 python3-pip
-
Install AI Security Module
cd ai-security pip3 install -r requirements.txt
-
Start HunterMatrix Services
./start_huntermatrix.sh
- Select hunting path or use quick hunt
- Configure hunting options (recursive, compressed files, etc.)
- Start hunting and observe real-time progress
- View detailed threat analysis reports
- View real-time network connection status
- Monitor suspicious connections and threat activities
- Analyze network traffic and geographical distribution
- View security event timeline
- Enter security-related questions in the chat box
- Use quick question buttons for common advice
- Get AI-analyzed threat assessments and recommendations
- View personalized security reports
HunterMatrix/
├── web-ui/ # Web Interface
│ ├── index-tailwind.html # HunterMatrix Version (Recommended)
│ ├── huntermatrix_complete.html # Complete Feature Version
│ ├── script-tailwind.js # HunterMatrix Version Scripts
│ ├── styles.css # Style Files
│ ├── tailwind.config.js # Tailwind Configuration
│ └── start-tailwind.sh # Startup Script
├── ai-security/ # AI Security Module
│ ├── ai_report_generator.py # AI Report Generator
│ ├── intelligent_threat_detector.py # Intelligent Threat Detection
│ └── requirements.txt # Python Dependencies
├── integrations/ # Integration Module
│ ├── velociraptor_huntermatrix.py # Velociraptor Integration
│ └── ntopng_integration.py # ntopng Integration
├── huntermatrix-gui/ # Tauri Desktop Application
├── docs/ # Documentation
└── README.md # Project Documentation
- Atomic CSS classes, highly customizable
- Responsive design, perfect adaptation to various devices
- Native dark/light mode support
- Modern design system
- Intelligent threat analysis algorithms
- Natural language processing conversations
- Automated report generation
- Machine learning pattern recognition
- WebSocket real-time data updates
- Email notification system
- Matrix instant messaging integration
- Multi-channel alert mechanisms
We welcome community contributions! Please check the following guidelines:
- Use GitHub Issues to report bugs
- Provide detailed reproduction steps
- Include system environment information
- Propose new feature suggestions in Issues
- Describe use cases and expected effects
- Participate in community discussions
- Fork the project and create feature branches
- Follow code standards and best practices
- Submit Pull Requests with change descriptions
This project is licensed under the MIT License.
- HunterMatrix Core: Powerful threat hunting engine
- Tailwind CSS: Modern CSS framework
- Font Awesome: Rich icon library
- Open Source Community: Continuous support and contributions
- GitHub: HunterMatrix Repository
- Issues: Report Bugs & Feature Requests
- Documentation: Wiki & Guides
🎯 HunterMatrix - Your Intelligent Threat Hunting Partner
Smart Hunting, Precise Protection
Made with ❤️ by the HunterMatrix Team
HunterMatrix 是一个基于 ClamAV 的智能威胁狩猎平台,集成了 AI 安全分析、实时监控、多平台支持等功能。该项目结合了传统杀毒技术与现代 AI 技术,为用户提供全面的安全解决方案。
- 🔍 实时威胁扫描: 基于 ClamAV 引擎的高效病毒检测
- 🧠 AI 安全分析: 集成机器学习算法进行威胁预测和分析
- 🎯 智能威胁狩猎: 主动发现和追踪高级持续性威胁 (APT)
- 📊 可视化报告: 实时安全状态监控和详细报告生成
- 🔗 多平台集成: 支持 Matrix、Email 等多种通知和通信方式
- 🖥️ 跨平台支持: Windows、macOS、Linux 全平台支持
- 🌐 Web 界面: 现代化的 Web 管理界面
HunterMatrix/
├── ai-security/ # AI 安全模块
├── clamav-*/ # ClamAV 核心组件
├── libclamav_rust/ # Rust 绑定库
├── src-tauri/ # Tauri 桌面应用
├── huntermatrix-gui/ # 前端 GUI
├── web-ui/ # Web 界面
├── integrations/ # 第三方集成
├── unit_tests/ # 单元测试
└── virus_database/ # 病毒数据库
- 后端: Rust, C, Python
- 前端: TypeScript, React, HTML5/CSS3
- 桌面应用: Tauri Framework
- 数据库: SQLite, 文件系统
- 安全引擎: ClamAV
- 通信: Matrix Protocol, SMTP
- 部署: Docker, Native Binary
- 操作系统: Windows 10+, macOS 10.15+, Ubuntu 18.04+
- 内存: 最少 4GB RAM,推荐 8GB+
- 存储: 至少 2GB 可用空间
- 网络: 可选(用于病毒库更新和远程通知)
- Rust: 1.60+
- Node.js: 16+
- Python: 3.8+
- CMake: 3.14+
- Git: 最新版本
git clone https://github.com/arkCyber/HunterMatrix.git
cd HunterMatrix
# 安装 Rust 依赖
cargo check
# 安装前端依赖 (可选)
cd huntermatrix-gui
npm install
# 编译 Rust 组件
cargo build --release
# 编译桌面应用 (可选)
cd src-tauri
cargo tauri build
# 运行扫描工具
./clamav_manager.sh
# 或运行桌面应用
cd src-tauri
cargo tauri dev
- ClamAV 核心引擎集成
- 基础文件扫描功能
- Rust 绑定库框架
- Web 界面框架
- 项目结构搭建
- AI 威胁分析模块
- Matrix 通信集成 (API 兼容性问题待解决)
- 邮件通知系统
- 实时监控界面
- Matrix SDK 兼容性: 当前使用的 matrix-sdk 0.7.1 版本 API 已过时,需要升级到最新版本
- 依赖缺失: 部分私有仓库依赖暂时不可用 (clam-sigutil, onenote_parser)
- 配置访问: 需要完善配置结构的公共 API
- 单元测试: 部分模块的测试覆盖率需要提升
- 修复 Matrix SDK 问题:
# 升级到最新的 matrix-sdk
cargo add matrix-sdk@latest
- 解决依赖问题:
# 临时注释掉不可用的依赖
# 等待私有仓库访问权限或寻找替代方案
- 运行测试:
cargo test --workspace
- Fork 项目并创建特性分支
- 遵循现有代码风格和注释规范
- 添加适当的单元测试
- 确保所有测试通过:
cargo test
- 提交 Pull Request
- 所有公共函数必须有详细的文档注释
- 使用
cargo fmt
格式化代码 - 使用
cargo clippy
检查代码质量 - 错误处理必须完善,避免 panic
- 重要操作需要添加日志记录
// 扫描单个文件
let result = scan_file("/path/to/file")?;
// 批量扫描
let results = scan_directory("/path/to/directory")?;
// 发送威胁告警
matrix_service.send_threat_alert(&threat_info).await?;
// 获取扫描状态
GET /api/scan/status
// 启动扫描
POST /api/scan/start
{
"path": "/path/to/scan",
"deep_scan": true
}
- arkSong - 项目维护者和主要开发者
- HunterMatrix Team - 核心开发团队
本项目采用 MIT 许可证 - 查看 LICENSE 文件了解详情。
- 问题报告: GitHub Issues
- 功能请求: GitHub Discussions
- 文档: 项目 Wiki
- 完善核心扫描功能
- 修复所有已知编译问题
- 实现基础 AI 分析
- 完成 Web 界面
- Matrix 通信集成
- 邮件通知系统
- 实时监控和告警
- 移动端支持
- 高级威胁狩猎
- 企业级功能
- 云端集成
- 多租户支持
如果这个项目对您有帮助,请给我们一个 Star!
注意: 这是一个正在积极开发的项目。某些功能可能不稳定或不完整。我们欢迎社区贡献和反馈!