Cross-Platform DLP Endpoint Agent
Budget: $750 – $1,500 USD
I am seeking a high-level systems programmer to develop an Endpoint Agent for a custom DLP (Data Loss Prevention) system. This is a long-term project starting with an MVP.
Key Responsibilities (MVP):
Kernel Level: Develop a Windows File System Minifilter Driver to monitor/block file operations on Removable Storage, Network Shares, and Cloud folders (Google Drive, OneDrive).
Shadow Copying: Implement silent background copying of intercepted files to a local buffer before transit.
Device Control: Implement USB/Peripheral monitoring and blocking based on VID/PID/Serial Number.
Activity Tracking: Develop a low-impact engine for:
Keylogging & Clipboard monitoring.
Screen capture (JPG/PNG) triggered by events (e.g., app switch, PrintScreen).
Real-time Desktop streaming (PoC).
Tech Stack Requirements:
Language: Expert C++ (17/20) or Rust.
Tools: Windows Driver Kit (WDK), WinAPI.
Networking: Understanding of WFP (Windows Filtering Platform) for future SSL/TLS inspection.
Database: SQLite for local event buffering.
Important Note:
Stability is priority #1. The agent must have a zero-BSOD guarantee and a minimal CPU footprint (under 2% idle). Code must be clean, documented, and ready for further scaling.
Key Responsibilities (MVP):
Kernel Level: Develop a Windows File System Minifilter Driver to monitor/block file operations on Removable Storage, Network Shares, and Cloud folders (Google Drive, OneDrive).
Shadow Copying: Implement silent background copying of intercepted files to a local buffer before transit.
Device Control: Implement USB/Peripheral monitoring and blocking based on VID/PID/Serial Number.
Activity Tracking: Develop a low-impact engine for:
Keylogging & Clipboard monitoring.
Screen capture (JPG/PNG) triggered by events (e.g., app switch, PrintScreen).
Real-time Desktop streaming (PoC).
Tech Stack Requirements:
Language: Expert C++ (17/20) or Rust.
Tools: Windows Driver Kit (WDK), WinAPI.
Networking: Understanding of WFP (Windows Filtering Platform) for future SSL/TLS inspection.
Database: SQLite for local event buffering.
Important Note:
Stability is priority #1. The agent must have a zero-BSOD guarantee and a minimal CPU footprint (under 2% idle). Code must be clean, documented, and ready for further scaling.