OWL WATCHER
Enterprise Linux CLI for real-time network monitoring, anomaly detection, SIEM export, and operational reporting.
OWL WATCHER is a standalone Linux CLI tool distributed as the owl binary. Install with one shell command — no manual venv setup required. Features include live packet capture, anomaly detection, InfluxDB time-series storage, email/webhook alerting, SIEM export, supervised threat-model training, JSON output for automation, systemd deployment units, and an optional HTTP API with dashboard. Commands cover capture, serve, health checks, preflight validation, interface discovery, configuration management, report generation, and IP blocking (dry-run by default). Authorized use only: monitor networks you own or have explicit permission to observe.
Commands
curl -fsSL https://raw.githubusercontent.com/green-cyber-city/owl-watcher/main/scripts/install.sh | bashowlowl versionowl interfacesowl check --capture --jsonsudo owl capture --interface eth0 --bpf "tcp port 443"owl serve --host 0.0.0.0 --port 8000owl healthowl report generate --input data/labeled.csvowl train --input data/labeled.csv