​Hi everyone,

​Over the past few weeks, I’ve been working on an open-source defensive cybersecurity project called Zero-Day Radar.

​The goal is to build a high-performance network monitoring and threat detection framework. I decided to use a hybrid architecture:

​C++ Core Engine (88.1%): Handles the low-level heavy lifting — fast network packet capture, process monitoring, and minimal overhead execution.

​Python Analytical Layer (11.9%): Parses telemetry data, aggregates log records, and integrates with threat intelligence feeds.

​Key components in the repo:

​radar_core.cpp - Low-level monitoring engine

​zeroday_radar.py - Log parser & analytical engine

​rules.txt & radar.conf - Custom detection logic

​The source code is available here:

https://github.com/aouamchawki-3A/zero-day-radar

​I would really appreciate any feedback from the community regarding the C++ performance, IPC mechanisms between C++ and Python, or suggestions for additional detection capabilities!