MCPcopy Index your code
hub / github.com/Goqi/AvHunt

github.com/Goqi/AvHunt @1.0

Chat with this repo
repository ↗ · DeepWiki ↗ · release 1.0 ↗ · + Follow
456 symbols 1,069 edges 70 files 186 documented · 41%
What it actually does AI analysis from the code graph — generated when you open this
loading…
README

AvHunt-杀毒软件识别

AvHuntEDRHunt的修改版,添加多个杀毒软件的识别,更容易识别中国的杀毒软件!

Usage

  • Find installed EDRs
$ AvHunt.exe scan
[EDR]
Detected EDR: Windows Defender
Detected EDR: 奇虎360 Defender
Detected EDR: 金山毒霸 Defender
Detected EDR: 安全狗 Defender
  • Scan Everything
$ AvHunt.exe all
  • Find services matching EDR keywords
$ AvHunt.exe -s
  • Find drivers matching EDR keywords
$ AvHunt.exe -d
  • Find registry keys matching EDR keywords
$ AvHunt.exe -r

AvHunt

AvHunt Detections Currently Available

  • 火绒
  • 天擎
  • 360
  • 金山毒霸
  • 安全狗
  • 云锁椒图
  • 腾讯电脑管家
  • 天融信EDR
  • 瑞星杀毒
  • 江民杀毒
  • 安天杀毒
  • 百度杀毒
  • D盾
  • 护卫神
  • 墨者安全
  • 亚信安全
  • 阿里云盾
  • 熊猫卫士

以下待更新

  • 深信服EDR
  • 绿盟EDR

EDRHunt

EDRHunt Detections Currently Available

  • Windows Defender
  • Kaspersky Security
  • Symantec Security
  • Crowdstrike Security
  • Mcafee Security
  • Cylance Security
  • Carbon Black
  • SentinelOne
  • FireEye
  • Elastic EDR
  • Qualys EDR
  • Trend Micro EDR
  • ESET EDR
  • Cybereason EDR
  • BitDefender EDR
  • Checkpoint EDR
  • Cynet EDR
  • DeepInstinct EDR
  • Sophos EDR
  • Fortinet EDR
  • MalwareBytes EDR
  • LimaCharlie Agent

Todo

  • https://github.com/wwl012345/AVCheck

Extension points exported contracts — how you extend this code

EDRDetection (Interface)
(no doc) [40 implementers]
pkg/resources/scan_edr.go
PositionalArgs (FuncType)
(no doc)
pkg/cobra/args.go
Recon (Interface)
(no doc)
pkg/resources/edrRecon.go

Core symbols most depended-on inside this repo

WriteStringAndCheck
called by 50
pkg/cobra/cobra.go
Flags
called by 48
pkg/cobra/command.go
CountMatchesAll
called by 40
pkg/resources/systemdata.go
Println
called by 33
pkg/cobra/command.go
Name
called by 30
pkg/resources/scan_edr.go
Root
called by 28
pkg/cobra/command.go
Printf
called by 26
pkg/cobra/command.go
Name
called by 26
pkg/cobra/command.go

Shape

Method 279
Function 113
Struct 53
TypeAlias 8
Interface 2
FuncType 1

Languages

Go100%

Modules by API surface

pkg/cobra/command.go122 symbols
pkg/cobra/completions.go20 symbols
pkg/avRecon/drivers_windows.go19 symbols
pkg/cobra/bash_completions.go17 symbols
pkg/cobra/cobra.go14 symbols
pkg/resources/edrRecon.go11 symbols
pkg/cobra/shell_completions.go11 symbols
pkg/cobra/args.go11 symbols
cmd/AvHunt.go10 symbols
pkg/cobra/zsh_completions.go9 symbols
pkg/cobra/flag_groups.go9 symbols
pkg/cobra/powershell_completions.go7 symbols

For agents

$ claude mcp add AvHunt \
  -- python -m otcore.mcp_server <graph>

⬇ download graph artifact