CyberDoc - (IIDTIANS)

Inspiration

We wanted to build the first endpoint security solution from AP.

What it does

1. Running process scanning for malicious activity if malicious kills the process
2. Monitor the system for file system events and scan for malwares based on signatures
3. Scans the system for net connections and and kills malicious ip making process.
4. Perform CDR which is content disarming and Reconstruction (extracting only content from documents(pdf and doc) so as to remove all macros or javascript objects which can have malicious activity)
5. Perform Signature check to see if the certificate for the executable is valid
6. Quarantine for malwares ## How we built it we used python and sqlite3 db ## Challenges we ran into
7. synchronization between multiprocess
8. Race conditions ## Accomplishments that we're proud of
9. CDR
10. Running process scanner with detection from multiple AV's 3.Imp hash ## What we learned

What's next for CyberDoc

1. Imp hash Fuzzing 2.User behavior Analysis

Built With

• python
• sqlite