diff --git a/.coverage b/.coverage new file mode 100644 index 0000000..b431c15 Binary files /dev/null and b/.coverage differ diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml new file mode 100644 index 0000000..e948758 --- /dev/null +++ b/.pre-commit-config.yaml @@ -0,0 +1,31 @@ +repos: + - repo: https://github.com/psf/black + rev: 23.11.0 + hooks: + - id: black + language_version: python3.10 + + - repo: https://github.com/pre-commit/pre-commit-hooks + rev: v4.5.0 + hooks: + - id: trailing-whitespace + - id: end-of-file-fixer + - id: check-yaml + - id: check-added-large-files + + - repo: local + hooks: + - id: mypy + name: mypy + entry: mypy + language: system + types: [python] + args: ["--strict", "shellscope/backend"] + pass_filenames: false + + - id: flutter-analyze + name: flutter analyze + entry: flutter analyze + language: system + types: [dart] + pass_filenames: false diff --git a/index.html b/index.html index 852eccb..e913d55 100644 --- a/index.html +++ b/index.html @@ -1,223 +1,289 @@ - - - - - ShellScope - - - -
- -
- -
-
-

The Windows Terminal Flight Recorder

-

Capture transient process activity. Log command arguments. Store everything locally.

-
- View on GitHub - +
+ + Flutter
-
- -
-
-

Flash Capture

-

Detects processes with lifespans under 100 milliseconds.

+
+ + SQLite
-
-

Deep Visibility

-

Logs parent PIDs and full command line arguments.

+
+ + Windows
-
-

Offline First

-

Zero cloud dependency. Data is stored in a local SQLite database.

-
-
+ + + -
-

Built with Flutter, Python WMI, and SQLite.

-
-
+
+
+

Users & Use Cases

+
+
+

Paranoid Developers / SecOps

+

Catch malware scripts or debugging flashes ProcMon misses.

+

Use case: forensic replay of exact command lines and parent processes.

+
+
+

SMB IT Admins

+

Monitor employee machines for suspicious -enc PowerShell behavior.

+

Use case: compliance logging with local SQLite exports for air-gapped audits.

+
+
+

Non-Tech Home Users

+

Spot random CMD/PowerShell popups from miners or persistence scripts.

+

Use case: real-time alerts with suspicious commands highlighted in red.

+
+
+
+
-