Jev-AV
Windows antivirus and EDR prototype that extracts file, process and URL features and asks Jev for verdicts, severity and indicators.
Overview
Jev-AV is a Python antivirus scanner, URL checker and real-time endpoint detection and response sentinel for Windows that uses Jev for verdicts. It extracts structural features from executables, scripts, documents, text and links, such as Shannon entropy, hashes, strings, PE imports and sections, PDF triggers, macros, process lineage, LOLBIN arguments and network sockets, and sends them to Jev for a verdict, a 0-4 severity score and Noul indicators. Local rules then quarantine files or flag them for review.
Features include a CustomTkinter desktop GUI, live process triage with parent-child anomaly detection, a URL scanner that unmasks redirect chains, a watchdog folder shield, and a quarantine vault with restore and shredding. Coverage spans PE, ELF, PDF, Office, LNK, archives, scripts and prompt injections. The README is marketing-heavy and does not present detection-rate evaluations, so it should be treated as an experimental prototype rather than a replacement for established security tools.
What the decision model decides
| Type | Question | Answers |
|---|---|---|
| Choice | Is this file malicious, suspicious or clean?(inferred) | — |
| Score | How severe is the threat (0-4)? | 0 · 1 · 2 · 3 · 4 |
| Yes / no | Does this file show a specific malicious indicator? | yes · no |
How it works
- Extract structural features from a file, process or URL
- Send features to Jev for verdict, severity and indicators
- Apply local quarantine or review rules
- Show results in the GUI and logs
Strengths
- Broad file-type coverage
- Desktop GUI with quarantine and restore
Caveats
- No published detection-rate evaluation
- Features of potentially sensitive files are sent to an API
- Not a substitute for established antivirus
Getting started
`python gui.py` or `jev-av gui` after installing dependencies and setting a TypeSafe key.At a glance
- Type
- Project
- Status
- prototype
- Language
- Python
- Runtime
- Windows desktop app and CLI
- Has code
- yes
Use cases and integrations
How curated lists describe it
A file scanner that sends extracted features to Jev for a verdict, a 0–4 severity score, and Noul indicators, then applies local quarantine or review rules.
logicrw/awesome-jev-projectsAntivirus scanner and real-time defense sentinel: extracts structural features from executables, scripts, and documents (entropy, hashes, strings, PE imports) and has Jev judge whether each is malicious.
hellogumbo/awesome-jev
Frequently asked questions
What does Jev judge?
Whether extracted file, process or URL features indicate malware, with severity and indicators.
Does it send my files to the cloud?
It sends extracted features to the Jev API.
Has its accuracy been measured?
The README does not present detection-rate results.
Related projects
Passive Chrome extension that inventories a site's browser-visible attack surface and uses local Laya or Jev to prioritise findings.
ServicebetaTypeScriptGo CLI for managing WordPress sites at scale, with typesafe commands that ask Jev questions and a scan --triage that ranks malware findings.
ProjectproductionGoOpen-source link attribution platform whose malicious-link check calls Jev before a short link is created.
ProjectproductionTypeScriptCisco's security scanner for agent skills, with a System One analyzer as an advisory tier that cannot emit findings or change severity.
Agent skillproductionPythonCLI that scans source, build and CI files with Jev for hidden, deceptive or data-stealing behavior before you run unfamiliar code.
CLIbetaTypeScriptUnix-style tools where Jev learns a repo's decision norms and judges each node of a code lead as a bug, lead or clean.
ProjectbetaJavaScript