Skip to content

What is Intrudex

Intrudex is a comprehensive, lightweight intrusion detection and prevention system (IDPS) specifically designed for Windows environments. Leveraging the power of Sigma rules—a community-driven standard for describing log events—Intrudex continuously monitors Windows Event Logs to identify suspicious activity, potential threats, and indicators of compromise.

Key Features

  • Real-Time Threat Detection: Monitors Windows Event Logs and applies Sigma rules to detect suspicious activity as it happens.
  • Modular Architecture: Flexible design suitable for both individuals and organizations, allowing easy customization and extension.
  • Web Dashboard: Centralized monitoring and management via a user-friendly Flask-based dashboard.
  • Self-Healing Mechanisms: Ensures persistent protection, even against attempts to disable or tamper with the system.

How It Works

  1. Log Collection: Continuously gathers Windows Event Logs from the endpoint.
  2. Sigma Rule Application: Transforms raw log data into meaningful alerts using community-driven Sigma rules.
  3. Threat Analysis: Evaluates alerts to determine the severity and nature of detected threats.
  4. Centralized Monitoring: Presents all alerts and findings in a web dashboard for easy review and management.

Project Background

Intrudex was originally developed as a Final Year Project for the BS Digital Forensics and Cybersecurity program.
The goal: bridge the gap between advanced threat detection techniques and practical, effective defense for Windows endpoints.

Why Choose Intrudex?

  • Lightweight: Minimal resource usage, ideal for endpoints.
  • Community-Driven: Utilizes Sigma rules, benefiting from ongoing contributions and updates.
  • Practical Defense: Focuses on actionable alerts to keep systems secure.
  • Easy to Use: Simple setup and intuitive dashboard for monitoring and management.

Get Involved

Intrudex is open for contributions and feedback.
If you are interested in cybersecurity, log analysis, or endpoint protection, consider joining the project or sharing your ideas.