
systeminformer
Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Real-time Windows system monitor with advanced process, network, and disk analysis, stack trace debugging, malware detection, and service management.…

Centralized network visibility and continuous asset discovery. Monitor devices, detect change, and stay aware across distributed networks.

Open-source security framework for real-time event tracking, threat detection, and risk scoring. Monitors user behavior, detects fraud, bot attacks,…

AI-powered threat intelligence platform for automated CVE/ransomware monitoring, domain surveillance, data leak detection, and incident response with…

A collection of PowerShell modules designed for artifact gathering and reconnaisance of Windows-based endpoints.

The world's most powerful System Activity Monitor Engine · 一款功能强大的终端行为采集防御开发套件 ~ 旨在帮助EDR、零信任、数据安全、审计管控等终端安全软件可以快速实现产品功能,…


Endpoint detection & Malware analysis software

Botnet command & control monitor

OS-level monitor for AI agents: observes processes, file access, and network activity on the local machine and attributes each event to an agent…

Useful access control entries (ACE) on system access control list (SACL) of securable objects to find potential adversarial activity

A GitHub recon/monitoring tool for finding internal leaks belonging to your organisation.

TheLightScope

The Console Monitor Driver is a KMDF kernel-mode filter driver that captures certain Fast I/O operations (input and output) that is sent to or from…

Cloud Canary Object Orchestration Management Platform

CVE-2020-9483 OR CVE-2020-13921


One-command scanner for the Mini Shai-Hulud npm supply-chain worm (CVE-2026-45321). Detect before rotating tokens.