π‘οΈ Process Anomaly Detector Process Anomaly Detector is a lightweight Go-based monitoring tool designed to detect suspicious process behavior in Unix-like systems. It continuously analyzes process trees, CPU and memory usage, network connections, and parent-child relationships to identify potential security threats or system anomalies.
π Features Parent-Child Relationship Analysis β Detects unusual process hierarchies (e.g., nginx -> bash). CPU & Memory Monitoring β Flags processes consuming excessive system resources. Network Connection Inspection β Alerts on suspicious listening ports and outbound connections. Automated Alerts β Sends notifications to a monitoring system via webhooks. Process Termination β Can automatically kill suspicious processes. Logging System β Stores detected anomalies for later analysis.
This tool is ideal for system administrators, security engineers, and DevOps professionals looking for a simple yet effective process monitoring solution. π