A 100% locally-run Host SOC and Intrusion Detection System (IDS) for Ubuntu Linux featuring real-time journalctl streaming, online anomaly detection with River ML, local SQLite persistence, and an interactive Rich CLI dashboard.
machine-learning ubuntu sqlite systemd python3 cybersecurity intrusion-detection typer journalctl anomaly-detection blue-team rich-cli river-ml host-ids
-
Updated
Jul 26, 2026 - Python