import psutil

def scan_processes():
    suspicious = []
    for proc in psutil.process_iter(['pid', 'name', 'exe', 'cmdline']):
        try:
            path = proc.info['exe'] or ''
            if '/tmp' in path or 'sh' in proc.info['name']:
                suspicious.append(proc.info)
        except psutil.AccessDenied:
            continue
    return suspicious

import socket

def get_open_ports():
    return [conn.laddr.port for conn in psutil.net_connections() if conn.status == 'LISTEN']

from watchdog.observers import Observer
from watchdog.events import FileSystemEventHandler

class TmpWatcher(FileSystemEventHandler):
    def on_created(self, event):
        print(f"[!] Создан файл в /tmp: {event.src_path}")

import openai

def explain_event(event_text):
    response = openai.ChatCompletion.create(
        model="gpt-4",
        messages=[{"role": "user", "content": f"Объясни, может ли это быть вредоносным:\n{event_text}"}],
        temperature=0.2,
    )
    return response['choices'][0]['message']['content']

from rich.console import Console
console = Console()

def report(process):
    text = f"Подозрительный процесс: {process['name']} — {process['exe']}"
    console.print(f"[bold red]⚠️  {text}[/bold red]")
    explanation = explain_event(text)
    console.print(f"[green]→ {explanation}[/green]")