Arynox NetScope - Phase 3 Full Product Upgrade
Copyright (c) Arynox | IT Services 2012-2026. All rights reserved.
Website: https://arynox.com

IMPORTANT
This is a Windows Visual Studio WPF project. Real packet capture requires:
1. Npcap installed on Windows
2. Visual Studio / the compiled app running as Administrator
3. An active network adapter selected

WHAT THIS BUILD ADDS
1. Insights Engine
   - Background analyzer runs every few seconds.
   - Detects high DNS latency, TCP retransmission patterns, failed/slow service responses, sensitive ports and unknown public endpoints.
   - Results are pushed to Smart Issues and Timeline.

2. Session Intelligence
   - Packets are grouped into host/protocol/port sessions.
   - Sessions show packet count, bytes, average latency and health.

3. Geo / Reputation Lite
   - Endpoint scope detection: private/public/domain.
   - Country hints, ASN/provider hints and risk score.
   - Works locally without external API dependency.

4. Deep Search
   - Live and static search across packet data.
   - Supports field filters such as:
     ip:1.1.1.1
     port:443
     protocol:tcp
     country:US
     asn:cloudflare
     risk:high
   - Supports OR logic:
     protocol:dns OR port:443

5. Traffic Visualization
   - Added Traffic Visuals menu.
   - Connection Map table groups local-to-remote connections with protocol, port, packets, bytes, weight and risk.
   - Timeline shows DNS delays, TCP errors, service errors, spikes and insight scans.

6. Real-time Alerts
   - Alert rules can be added from the Alerts page.
   - Default rules detect RDP, SMB, SQL Server and DNS traffic.
   - Rules feed Smart Issues.

7. Security Features
   - Sensitive-port detection.
   - Suspicious DNS pattern detection.
   - Unknown-public-endpoint detection.
   - Exposure warnings for risky outbound public services.

8. Capture Profiles
   - General Monitor
   - Debug Website/API
   - DNS Issues
   - Security Watch
   - Gaming / Latency
   - Applying a profile changes the default search and focus message.

9. Save / Replay Sessions
   - Added Save / Replay menu.
   - Save current capture as JSON under AppData.
   - Reload saved sessions later for offline review.

10. Enterprise Foundation
   - Remote Agents page now includes local agent and planned remote sensor templates.
   - Establishes the data model for future signed Windows service agents.

11. Expanded Network Tools
   - Ping
   - NSLookup
   - Port Scanner
   - Speed Test
   - Trace Route
   - WHOIS / Reverse DNS
   - SSL Certificate Inspector
   - HTTP Headers / API Tester with HTTP method selector

12. UI Polish
   - Dark/light/system theme retained.
   - Wider result tables keep horizontal scrollbars.
   - Added more structured pages and clearer product grouping.

13. Plugin System Foundation
   - Plugin registry page for built-in analyzers, exporters and enrichers.
   - External loader remains locked until signing/sandboxing is implemented.

BUILD NOTES
- Open ArynoxNetScope.sln in Visual Studio 2022.
- Restore NuGet packages.
- Install Npcap from https://npcap.com.
- Run Visual Studio as Administrator for live capture.
- Build and run.


Phase 3.3 update:
- WHOIS Lookup and Reverse DNS are now separate left-side menu items.
- WHOIS Lookup now performs real WHOIS lookups over TCP port 43 against the relevant registry/registrar WHOIS server where available.
- Reverse DNS now performs PTR/canonical lookup separately and supports IPs, hostnames, and URLs.

Phase 3.16 Settings / Network Adapters Cleanup
- Capture menu renamed to Network Adapters.
- Network Adapters page is now information/status only.
- Smart issue detection option moved to Settings with explanation.
- Clear capture when monitor source changes option moved to Settings with explanation.
- Theme Preference dropdown moved under Theme options.
- Removed old capture note text from Settings.

UPDATE NOTES - Phase 3.23
- Added Help & Info as the last left-menu item.
- Added and linked the Help & Info page.
- Fixed CS8604 possible null reference warning around IsPrivateIp(endpoint).
- Hardened startup so the splash screen cannot stay open if MainWindow startup fails.
- Removed bin/obj/.vs build-cache folders from this package to avoid stale Visual Studio artifacts.
