Automatically translated.View original post

"AI detects dangerous files" 100% free, do not reconcile expensive software!

🚀, turn Google Sheets into a 100% free "AI detecting dangerous files" system, do not reconcile expensive software!

- As IT workers and system developers, one of our concerns is "Endpoint Security," especially when users accidentally download risky random files from pop-ups or dangerous websites through browsers.

- Today I want to share the idea of creating a "Real-time AI Download Monitor" system that I designed and developed myself. The highlight is lightweight, automatic from power on and, importantly, 100% free, not a baht! Using Python's power with Google Cloud.

🛠ïļ in the System Architecture

- This system is not used to install Extension on all browsers, but to "File System Monitoring" on the Windows operating system.

It is divided into two main parts:

1 Client (Python Background Service):

- Use the watchdog library to quietly monitor the Downloads folder, consuming very low resources (almost 0%). When the file is loaded, Python will use a special technique to read the Zone.Identifier hidden in the NTFS system file of Windows to track the "source URL" that downloaded the file immediately (even if the browser is changed, it will be caught!)

2 Cloud Side (AI & Log System):

- Python will send file name and source URL information to the Gemini-Flash API (Free Tier). It acts as an AI security screening. Heuristic analysis of whether this file and domain is malware or phishing vulnerable. All download data will be fired into Google Apps Script (GAS) to save as a Log. Automatically summarize the status of Google Sheets.

Alert: If AI detects high risk, it will Trigger to LINE Messaging API to bounce a warning into the group of the admin team or system administrator immediately so that it can be handled in a timely manner.

ðŸ’Ą Why does this system solve modern organizational problems?

- Zero Cost: rely on high-performance free tools like Python, Google Sheets, Gemini API and LINE OA.

- Seamless Experience: User Works Normal No Retardation Interrupts Computer Operation

- Centralized Data: Administrators can check the retrospective download history of every machine on the network from a single Google Sheet.

- This is an example of a combination of free open source & cloud services to effectively solve enterprise security problems.

- Anyone who is looking for this solution to deploy or wants to exchange ideas about system extension, such as connecting to other databases, can talk! 👇

🏷ïļ# CyberSecurity # Python # GoogleAppsScript # GoogleSheets # GeminiAI# Automation # ITSupport # SoftwareDevelopment # TechInnovation

# Security system # IT # Developer # Write code # Give away ideas # Free system # GenerativeAI # DevLife # NetworkSecurity

6/1 Edited to

... Read moreāļˆāļēāļāļ—āļĩāđˆāđ„āļ”āđ‰āļĨāļ­āļ‡āļžāļąāļ’āļ™āļēāļĢāļ°āļšāļš AI āļ•āļĢāļ§āļˆāļˆāļąāļšāđ„āļŸāļĨāđŒāļ­āļąāļ™āļ•āļĢāļēāļĒāđ‚āļ”āļĒāđƒāļŠāđ‰ Python āļĢāđˆāļ§āļĄāļāļąāļš Google Sheets āđāļĨāļ° Gemini AI API āļžāļšāļ§āđˆāļēāđ€āļ›āđ‡āļ™āļ§āļīāļ˜āļĩāļ—āļĩāđˆāđ€āļŦāļĄāļēāļ°āļāļąāļšāļ­āļ‡āļ„āđŒāļāļĢāļ—āļĩāđˆāļ•āđ‰āļ­āļ‡āļāļēāļĢāļĢāļ°āļšāļšāļĢāļąāļāļĐāļēāļ„āļ§āļēāļĄāļ›āļĨāļ­āļ”āļ āļąāļĒāļ—āļĩāđˆāđ„āļĄāđˆāļ‹āļąāļšāļ‹āđ‰āļ­āļ™āđāļĨāļ°āđ„āļĄāđˆāļ•āđ‰āļ­āļ‡āļĨāļ‡āļ—āļļāļ™āļŠāļđāļ‡ āđƒāļ™āļ›āļĢāļ°āļŠāļšāļāļēāļĢāļ“āđŒāļāļēāļĢāđƒāļŠāđ‰āļ‡āļēāļ™āļˆāļĢāļīāļ‡āļ™āļąāđ‰āļ™ āļĢāļ°āļšāļšāļŠāļēāļĄāļēāļĢāļ–āļ—āļģāļ‡āļēāļ™āļ”āđ‰āļ§āļĒāļ—āļĢāļąāļžāļĒāļēāļāļĢāđ€āļ„āļĢāļ·āđˆāļ­āļ‡āļ•āđˆāļģāļĄāļēāļ āđāļĨāļ°āđ„āļĄāđˆāļĢāļšāļāļ§āļ™āļāļĢāļ°āļšāļ§āļ™āļāļēāļĢāļ—āļģāļ‡āļēāļ™āļ‚āļ­āļ‡āļœāļđāđ‰āđƒāļŠāđ‰āļ—āļąāđˆāļ§āđ„āļ›āđ€āļĨāļĒ āđ€āļžāļĢāļēāļ°āļĢāļ°āļšāļšāļˆāļ°āļ—āļģāļ‡āļēāļ™āđƒāļ™āđ€āļšāļ·āđ‰āļ­āļ‡āļŦāļĨāļąāļ‡āļ„āļ­āļĒāļˆāļąāļšāđ„āļŸāļĨāđŒāļ—āļĩāđˆāļ”āļēāļ§āļ™āđŒāđ‚āļŦāļĨāļ”āđ€āļ‚āđ‰āļēāļĄāļē āđāļĨāļ°āļ”āļķāļ‡āļ‚āđ‰āļ­āļĄāļđāļĨ URL āļ•āđ‰āļ™āļ—āļēāļ‡āđāļšāļšāļ­āļąāļ•āđ‚āļ™āļĄāļąāļ•āļī āļāļēāļĢāļœāļŠāļēāļ™āļāļąāļš Cloud AI āļ—āļģāđƒāļŦāđ‰āļŠāļēāļĄāļēāļĢāļ–āļ§āļīāđ€āļ„āļĢāļēāļ°āļŦāđŒāđ„āļŸāļĨāđŒāđāļĨāļ°āđ‚āļ”āđ€āļĄāļ™āļ•āđ‰āļ™āļ—āļēāļ‡āđ„āļ”āđ‰āļ­āļĒāđˆāļēāļ‡āđāļĄāđˆāļ™āļĒāļģ āļˆāļļāļ”āđ€āļ”āđˆāļ™āļ—āļĩāđˆāļ—āļģāđƒāļŦāđ‰āļĢāļ°āļšāļšāļ™āļĩāđ‰āļ™āđˆāļēāļŠāļ™āđƒāļˆāļ„āļ·āļ­āļāļēāļĢāđƒāļŠāđ‰āļŸāļĩāđ€āļˆāļ­āļĢāđŒāļ‚āļ­āļ‡ Windows NTFS āļ­āļĒāđˆāļēāļ‡ Zone.Identifier āđƒāļ™āļāļēāļĢāļ•āļĢāļ§āļˆāļŠāļ­āļšāđāļŦāļĨāđˆāļ‡āļ—āļĩāđˆāļĄāļēāļ‚āļ­āļ‡āđ„āļŸāļĨāđŒ āļ‹āļķāđˆāļ‡āļŠāđˆāļ§āļĒāđƒāļ™āļāļēāļĢāļĢāļ°āļšāļļāļ„āļ§āļēāļĄāđ€āļŠāļĩāđˆāļĒāļ‡āđ„āļ”āđ‰āđāļĄāđ‰āļœāļđāđ‰āđƒāļŠāđ‰āļˆāļ°āđ€āļ›āļĨāļĩāđˆāļĒāļ™āđ€āļšāļĢāļēāļ§āđŒāđ€āļ‹āļ­āļĢāđŒ āļ™āļ­āļāļˆāļēāļāļ™āļĩāđ‰āļĢāļ°āļšāļšāļĒāļąāļ‡āļĄāļĩāļŸāļąāļ‡āļāđŒāļŠāļąāļ™āđāļˆāđ‰āļ‡āđ€āļ•āļ·āļ­āļ™āļœāđˆāļēāļ™ LINE Messaging API āļ—āļĩāđˆāļŠāđˆāļ§āļĒāđƒāļŦāđ‰āļ—āļĩāļĄāļ”āļđāđāļĨāļĢāļ°āļšāļšāļĢāļąāļšāļ—āļĢāļēāļšāļŠāļ–āļēāļ™āļāļēāļĢāļ“āđŒāđ€āļŠāļĩāđˆāļĒāļ‡āļ­āļĒāđˆāļēāļ‡āļĢāļ§āļ”āđ€āļĢāđ‡āļ§āđāļĨāļ°āļŠāļēāļĄāļēāļĢāļ–āļˆāļąāļ”āļāļēāļĢāđ„āļ”āđ‰āļ—āļąāļ™āļ—āļĩ āļāļēāļĢāđ€āļāđ‡āļšāļšāļąāļ™āļ—āļķāļāđƒāļ™ Google Sheets āļĒāļīāđˆāļ‡āđ€āļžāļīāđˆāļĄāļ„āļ§āļēāļĄāļŠāļ°āļ”āļ§āļāđƒāļŦāđ‰āļœāļđāđ‰āļ”āļđāđāļĨāļŠāļēāļĄāļēāļĢāļ–āļ•āļĢāļ§āļˆāļŠāļ­āļšāļĒāđ‰āļ­āļ™āļŦāļĨāļąāļ‡ āļŦāļĢāļ·āļ­āļ§āļīāđ€āļ„āļĢāļēāļ°āļŦāđŒāđāļ™āļ§āđ‚āļ™āđ‰āļĄāļ„āļ§āļēāļĄāđ€āļŠāļĩāđˆāļĒāļ‡āđƒāļ™āđ€āļ„āļĢāļ·āļ­āļ‚āđˆāļēāļĒāļ—āļąāđ‰āļ‡āļŦāļĄāļ”āđ„āļ”āđ‰āļ­āļĒāđˆāļēāļ‡āļ‡āđˆāļēāļĒāļ”āļēāļĒ āļ—āļģāđƒāļŦāđ‰āļ”āļđāđāļĨ Endpoint Security āļ‚āļ­āļ‡āļ­āļ‡āļ„āđŒāļāļĢāđ„āļ”āđ‰āļ­āļĒāđˆāļēāļ‡āđ€āļ›āđ‡āļ™āļĢāļ°āļšāļšāđāļĨāļ°āļĄāļĩāļ›āļĢāļ°āļŠāļīāļ—āļ˜āļīāļ āļēāļž āļ–āđ‰āļēāļ„āļļāļ“āļāļģāļĨāļąāļ‡āļĄāļ­āļ‡āļŦāļēāđ‚āļ‹āļĨāļđāļŠāļąāļ™āļ‹āļķāđˆāļ‡āļ›āļĢāļ°āļŦāļĒāļąāļ”āļ„āđˆāļēāđƒāļŠāđ‰āļˆāđˆāļēāļĒ āđāļĨāļ°āļĒāļ·āļ”āļŦāļĒāļļāđˆāļ™āđƒāļ™āļāļēāļĢāļ›āļĢāļąāļšāđāļ•āđˆāļ‡ āļĢāļ°āļšāļšāļ™āļĩāđ‰āļ–āļ·āļ­āđ€āļ›āđ‡āļ™āļ•āļąāļ§āļ­āļĒāđˆāļēāļ‡āļ—āļĩāđˆāļ”āļĩāđƒāļ™āļāļēāļĢāļ›āļĢāļ°āļĒāļļāļāļ•āđŒ AI āđāļĨāļ° Cloud Services āļŸāļĢāļĩ āļĄāļēāļŠāđˆāļ§āļĒāđ€āļŠāļĢāļīāļĄāļ„āļ§āļēāļĄāļ›āļĨāļ­āļ”āļ āļąāļĒāđƒāļŦāđ‰āļāļąāļšāļ­āļ‡āļ„āđŒāļāļĢāđ‚āļ”āļĒāđ„āļĄāđˆāļ•āđ‰āļ­āļ‡āļžāļķāđˆāļ‡āļ‹āļ­āļŸāļ•āđŒāđāļ§āļĢāđŒāļĢāļēāļ„āļēāļŠāļđāļ‡ āļŦāļĢāļ·āļ­āļĢāļ°āļšāļšāļ—āļĩāđˆāļ‹āļąāļšāļ‹āđ‰āļ­āļ™āļĄāļēāļāđ€āļāļīāļ™āđ„āļ› āđāļ™āļ°āļ™āļģāđƒāļŦāđ‰āļĨāļ­āļ‡āļ—āļ”āļŠāļ­āļšāļāļąāļšāđ€āļ„āļĢāļ·āđˆāļ­āļ‡āļ•āļąāļ§āļ­āļĒāđˆāļēāļ‡āļāđˆāļ­āļ™āđ€āļžāļ·āđˆāļ­āļ›āļĢāļąāļšāđāļ•āđˆāļ‡āļ•āļēāļĄāļ„āļ§āļēāļĄāļ•āđ‰āļ­āļ‡āļāļēāļĢāđ€āļ‰āļžāļēāļ°āļ‚āļ­āļ‡āļ­āļ‡āļ„āđŒāļāļĢ āđāļĨāļ°āļŠāļēāļĄāļēāļĢāļ–āļ‚āļĒāļēāļĒāļ„āļ§āļēāļĄāļŠāļēāļĄāļēāļĢāļ–āđ„āļ”āđ‰āļ”āđ‰āļ§āļĒāļāļēāļĢāđ€āļŠāļ·āđˆāļ­āļĄāļ•āđˆāļ­āļāļąāļšāļāļēāļ™āļ‚āđ‰āļ­āļĄāļđāļĨāļ­āļ·āđˆāļ™āļŦāļĢāļ·āļ­āļĢāļ°āļšāļšāđāļˆāđ‰āļ‡āđ€āļ•āļ·āļ­āļ™āđ€āļžāļīāđˆāļĄāđ€āļ•āļīāļĄāļ•āļēāļĄāļ„āļ§āļēāļĄāđ€āļŦāļĄāļēāļ°āļŠāļĄ āđ‚āļ”āļĒāļŠāđˆāļ§āļ™āļ•āļąāļ§āļžāļšāļ§āđˆāļēāļĢāļ°āļšāļšāļ™āļĩāđ‰āļŠāđˆāļ§āļĒāļĨāļ”āļ„āļ§āļēāļĄāļāļąāļ‡āļ§āļĨāđ€āļāļĩāđˆāļĒāļ§āļāļąāļšāļāļēāļĢāļ”āļēāļ§āļ™āđŒāđ‚āļŦāļĨāļ”āđ„āļŸāļĨāđŒāđ€āļŠāļĩāđˆāļĒāļ‡āđƒāļ™āļ—āļĩāļĄāļ‡āļēāļ™ IT āđ„āļ”āđ‰āļ”āļĩāļĄāļēāļ āđāļĨāļ°āļ—āļģāđƒāļŦāđ‰āļ—āļĩāļĄāļ”āļđāđāļĨāļĢāļ°āļšāļšāļĄāļĩāļ‚āđ‰āļ­āļĄāļđāļĨāļ„āļĢāļšāļ–āđ‰āļ§āļ™āđāļĨāļ°āļ­āļąāļ›āđ€āļ”āļ•āļ•āļĨāļ­āļ”āđ€āļ§āļĨāļēāđ‚āļ”āļĒāđ„āļĄāđˆāļ•āđ‰āļ­āļ‡āļĨāļ‡āđāļĢāļ‡āļĄāļēāļāļ™āļąāļ