main.py

import watchdog.observers
from watchdog.events import FileSystemEventHandler
import time
import hashlib
import os

created_count = 0
modified_count = 0
deleted_count = 0
file_hashes = {}


def write_log(message):
    with open("logs.txt", "a") as file:
        file.write(message + "\n")

def write_alert(message):
    with open("alerts.txt", "a") as file:
        file.write(message + "\n")

def save_report():
    with open("report.txt", "a") as file:

        file.write("\n===== SESSION REPORT =====\n")
        file.write(f"Date: {time.ctime()}\n")
        file.write(f"Files Created : {created_count}\n")
        file.write(f"Files Modified: {modified_count}\n")
        file.write(f"Files Deleted : {deleted_count}\n")
        file.write("=========================\n")

sensitive_files = [
    "passwords.txt",
    "salary.xlsx",
    "confidential.txt"
]

def calculate_hash(filepath):

    with open(filepath, "rb") as file:
        data = file.read()

    return hashlib.sha256(data).hexdigest()


def load_existing_hashes(folder):

    for root, dirs, files in os.walk(folder):

        for file in files:

            filepath = os.path.join(root, file)

            try:
                file_hashes[filepath] = calculate_hash(filepath)

            except:
                pass


class MonitorHandler(FileSystemEventHandler):

    def on_created(self, event):
        if event.src_path.endswith("desktop.ini"):
            return
        if not event.is_directory:
            global created_count
            created_count += 1

            message = f"{time.ctime()} | File Created: {event.src_path}"
            print(message)
            write_log(message)

            try:
                file_hashes[event.src_path] = calculate_hash(event.src_path)
                print("File hash stored")

            except PermissionError:
                print("File busy, hash skipped")

            print(f"Total Files Created: {created_count}")


    def on_modified(self, event):
        if event.src_path.endswith("desktop.ini"):
            return

        if event.src_path.endswith("logs.txt"):
            return

        if event.src_path.endswith("alerts.txt"):
            return

        if event.src_path.endswith("report.txt"):
            return

        if not event.is_directory:
            global modified_count
            modified_count += 1

            message = f"{time.ctime()} | File Modified: {event.src_path}"
            filename = event.src_path.split("\\")[-1]

            if event.src_path in file_hashes:
                try:
                    old_hash = file_hashes[event.src_path]
                    new_hash = calculate_hash(event.src_path)
                    if old_hash != new_hash:
                        print(f"🚨 INTEGRITY ALERT: {filename}")
                        print(f"Old SHA256 : {old_hash}")
                        print(f"New SHA256 : {new_hash}")

                        write_log(f"Old SHA256 : {old_hash}")
                        write_log(f"New SHA256 : {new_hash}")

                        file_hashes[event.src_path] = new_hash
                except PermissionError:
                    print("File busy, hash skipped")
            else:
                try:
                    file_hashes[event.src_path] = calculate_hash(event.src_path)
                    print("File hash stored")
                except PermissionError:
                    print("File busy, hash skipped")

            if filename in sensitive_files:
                alert_message = (
                    f"{time.ctime()} | "
                    f"Sensitive File Modified - {filename}"
                )
                print(f"🚨 {alert_message}")
                write_alert(alert_message)

            print(message)
            write_log(message)
            print(f"Total Files Modified: {modified_count}")


    def on_deleted(self, event):
        if event.src_path.endswith("desktop.ini"):
            return
        
        if not event.is_directory:
            global deleted_count
            deleted_count += 1

            message = f"{time.ctime()} | File Deleted: {event.src_path}"

            filename = event.src_path.split("\\")[-1]

            if filename in sensitive_files:
                alert_message = (
                    f"{time.ctime()} | "
                    f"Sensitive File Deleted - {filename}"
                )
                print(f"🚨 {alert_message}")
                write_alert(alert_message)

            print(message)
            write_log(message)
            print(f"Total Files Deleted: {deleted_count}")


event_handler = MonitorHandler()
observer = watchdog.observers.Observer()
path = "test_files"

load_existing_hashes(path)

observer.schedule(event_handler, path, recursive=True)

observer.start()

print("Monitoring Started...")

try:
    while True:
        time.sleep(1)
except KeyboardInterrupt:

    print("\n===== SESSION REPORT =====")

    print(f"Files Created : {created_count}")
    print(f"Files Modified: {modified_count}")
    print(f"Files Deleted : {deleted_count}")

    save_report()

    observer.stop()

observer.join()