Kharma - Network Radar for Threat Intelligence

Version: 1.0.1
Homepage: https://github.com/Mutaz/kharma-network-radar
Download: https://pypi.org/project/kharma-radar/
Author: Mutasem
License: MIT

Description:
Kharma is a fast, interactive network monitor that solves the "blind spot" problem. It uses psutil to map active network connections to their exact process IDs and names over a rich Live dashboard. It eliminates lookup lag by using an offline MaxMind GeoLite2 database and features a built-in Malware Threat Intelligence engine (cross-referencing with Firehol Level 1 feeds) to visually flag IPs associated with known botnets. It also includes a silent SQLite background logger.

Dependencies:
python3, python3-click, python3-rich, python3-psutil, python3-requests, python3-maxminddb

Similar tools:
netstat, lsof, tcpdump (but Kharma aggregates geolocation and threat intel dynamically into one seamless TUI).

Activity:
Actively developed and maintained.

How to install:
pip install kharma-radar

How to use:
kharma run
kharma run --filter chrome
kharma run --malware-only
kharma history
kharma kill <PID>

Note on Packaging:
Debian packaging metadata (control, rules, compat, copyright, changelog) and PKGBUILD templates are already prepared and available in the upstream repository under the linux_pkg/ directory to facilitate straightforward integration.