TrueAegis - Defensive exposure-intelligence platform with vali

项目说明

TrueAegis

TrueAegis is a local exposure intelligence and infrastructure analysis platform built around the NetSniper telemetry engine.

NetSniper discovers and structures network exposure data. TrueAegis , enriches, correlates, tracks, and reports on that data through both a terminal interface and a local web dashboard.

> TrueAegis is designed for authorized security assessment, internal exposure review, lab en, and defensi analysis.

---

O

TrueAegis helps answer a better question than “what ports are open?”

It helps answer:

> What does this en appear to be, what exposures matter most, and what changed over time?

The platform combines:

---

Architecture

---

Core Components

| Component | Purpose |
|---|---|
| NetSniper | Discovery, scanning, and structured exposure output |
| TrueAegis CLI | Terminal interface for analysis, , reports, snapshots, and deltas |
| | Safe exposure checks |
| Knowledge Base | Service context, risk metadata, correlation rules, report language |
| Intelligence Engine | Correlations, inferred roles, confidence scoring, analyst questions |
| Web UI | Local dashboard and control center at 127.0.0.1:8088 |
| Reporting Engine | Markdown and PDF intelligence reports |
| Workspace | Stored snapshots, deltas, logs, and historical state |

---

Features

NetSniper v2 Bundle Compatibility

TrueAegis v1.2 can read NetSniper v2 run bundles in addition to legacy analysis_*.json files. When a bundle contains bundle_quality.json, TrueAegis refuses bundles where deltaaegis_ready is false unless explicitly o for fixture/debug review.

Supported NetSniper bundle contracts:

Structured Exposure Telemetry

NetSniper outputs TrueAegis-compatible JSON:

Intelligence

TrueAegis can classify findings as:

Attack Surface Correlations

TrueAegis correlates related findings such as:

Host Role Inference

TrueAegis can infer likely host roles:

Historical Intelligence

TrueAegis stores snapshots and compares changes over time:

Local Web Dashboard

The web interface runs locally:

It includes:

---

Installation

Clone the repository:

Run the installer:

Restart your terminal or reload your shell:

Uninstall

Remo launchers while keeping project files, reports, results, and NetSniper data:

---

Requirements

System tools:

Python packages:

Install Python dependencies manually if needed:

---

Quick Start

Run NetSniper:

Run TrueAegis terminal interface:

Launch the local web dashboard:

Open:

Generate a full report:

Save a snapshot:

Compare snapshots:

---

Recommended Workflow

---

Project Layout

Generated reports, results, and workspace data are local runtime
artifacts and are not required to be committed to the repository.

---

Security and Ethical Use

TrueAegis and NetSniper are intended for:

Do not scan networks, systems, or services without proper authorization.

See SECURITY.md and ETHICAL_USE.md.

---

Roadmap

See ROADMAP.md.

---

Status

Current release:

TrueAegis is a stable, defensive tool for authorized en
and portfolio use. It remains actively de and is not a replacement for
a mature enterprise exposure-management or platform.

Local LLM or Ollama-based summarization is intentionally outside the supported
v1.2.0 scope because reliable local inference is not a project requirement.

---

License

MIT License. See LICENSE.

项目信息

开发语言：Python

Star 数：2

技术要点

该项目属于防护思路方向的开源资源，代码结构清晰，适合安全研究人员学习参考。项目围绕Defensive exposure-intelligence platform with validation-aware analysis, attack-surface correlation, snapshots, reports, and a local dashboard.展开，提供了可运行的实现，对理解相关安全机制、工具原理与攻防技术具有较高的研究价值。

从技术实现角度看，此类项目的核心在于对底层原理的深入理解与工程化落地。开发者在研究过程中可以结合官方文档与社区讨论，梳理项目的初始化流程、核心模块职责与数据流转，逐步掌握其中的技术细节与设计思路。

使用与学习建议

1. 下载源码压缩包，解压到本地环境。

2. 根据项目类型准备对应的运行环境与依赖。

3. 按照 README 中的步骤完成配置与部署。

4. 在隔离的测试环境中运行验证，避免影响生产系统。

免责声明

本资源来源于开源社区，仅供安全研究、技术学习与合法授权范围内的攻防演练使用，请勿用于任何非法或侵害他人权益的用途。使用本项目产生的一切后果由使用者自行承担。