# NETIntel

A SIEM-inspired security monitoring platform designed to monitor system and network activity across devices within a local network.

NETIntel provides centralized visibility into connected devices, network connections, running processes, and collected telemetry data through an interactive web dashboard.

## Features

- System and network monitoring
- Process and connection tracking
- Environment-based agent enrollment
- Google OAuth authentication
- Multi-tenant support
- Network discovery and device monitoring
- Interactive dashboard for data visualization

## Architecture

NETIntel consists of three main components:

### Backend

The backend handles authentication, telemetry ingestion, data processing, and API communication.

**Technologies**
- Python
- Flask
- SQLite
- JWT Authentication

### Frontend

The frontend provides an intuitive dashboard for monitoring devices and visualizing collected data.

**Technologies**
- React
- Vite
- JavaScript

### Agent

The agent runs on monitored devices and periodically collects telemetry information such as system details, running processes, and network activity.

Collected data is securely transmitted to the backend using environment tokens.

**Technologies**
- Python
- Psutil
- Requests

## Tech Stack

- Python
- Flask
- React
- SQLite
- JWT
- Google OAuth
- Git
- HTML
- CSS
- JavaScript

## 🚀 Installation

### Backend

```bash
pip install -r requirements.txt
python server.py
```

### Frontend

```bash
cd lan-frontend
npm install
npm run dev
```

### Agent

```bash
python sctry.py
```

The agent requires:
- Server IP
- Environment Token

## Configuration

Create a `.env` file:

```env
DB_FILE=lan_logs_sysmon.db
LOG_DIR=received_data_sysmon
GOOGLE_CLIENT_ID=your-google-client-id
JWT_SECRET=your-secret
COOKIE_SECURE=0
```

## Future Improvements

- Real-time alerting
- Agent auto-update
- Advanced threat detection
- Token management dashboard
- Automated deployment

## Author

**Ilina Stevanoska**