Development of Ravynel NDR Product
Heli Sudani
Enterprise Network Detection And Response
Ravynel transforms packet capture, distributed sensor visibility, behavioral analytics, and investigation reporting into one installable NDR product for security teams that need clarity fast.
A public product site. A private operations console. No mixed-mode chaos.
The public surface explains features, deployment, documentation, releases, support, and installer packages. It never runs packet capture.
The local GUI starts the analyzer, finds the right network URL, and opens a focused analyst console for real telemetry.
Long-query thresholds, subdomain entropy, single-domain frequency, and exfiltration scoring.
Horizontal scans, vertical sweeps, half-open SYN bursts, service drift, and asset risk.
Traversal, SQL injection patterns, automated user agents, oversized POSTs, and base64-heavy payloads.
Local indicators, IP/domain feeds, Tor context, IOC matching, and reputation-weighted prioritization.
From installer to investigation in one clean operator journey.
01
Download the Windows sensor control center. No source-code handoff for normal users.
02
The GUI detects the laptop LAN address and starts the analyzer on the right interface.
030405
See the traffic your sensor can actually observe.
A laptop can capture its visible adapter traffic immediately. For full enterprise LAN coverage, place Ravynel where packets traverse: gateways, mirrored ports, TAPs, or distributed collectors.
Like this project
Posted Jul 6, 2026
Developed the Ravynel NDR product integrating packet capture and analytics.
Likes
0
Views
1
