[new feature] create syscheck model

create syscheck model