Allow the user to define a system baseline/snapshot

Chameleon should allow the user to take a snapshot of their systems over a user defined period of time (start recording/stop recording) and use that as a baseline for their system. The baseline would record all of the processes running on the computer with typical usage statistics per second/minute or whatever. Those would include typical CPU, memory, I/O, Internet Traffic etc.

Chameleon could then report on all activity that deviates from that basne. If a new process starts that is not included in the baseline Chameleon should allow the user the option of adding it to the baseline, ignoring it, or warn of any future activity.

This would save the user from constantly having to monitor their systems for suspicious activity and would mean that they are not constantly interrupted by new process information that is just normal activity.

Although there are many programs on the market that monitor network traffic they tend to provide far too much information that the average user would not be able to understand. It is simply too difficult to know what is normal network activity and what is not. A firewall can allow the user to define what connections are allowed, or not, but they do not tend to tell the user what is actually happening that is wrong.

Supporting baselines would allow the user to concentrate on what is important. If multiple baselines were supported the user could define a baseline for different types of activities they do and set the correct baseline for Chameleon to monitor based on the activity they are doing.