Sysmon configuration file template with default high-quality event tracing

A Linux version of the ProcDump Sysinternals tool

Utilities for Sysmon

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

Secure delete files with right click. GUI for Sysinternals SDelete tool

Various tools besides Msys2 that I've found useful to have available on windows. Create an issue if you have anything you want to add, want some binaries updated, or you think that some of them should be moved or re-moved.

AwesomeWallpaper plays videos, shows images and system info on your desktop wallpaper

Volatility Explorer Suit

A ProcMon-esque tool for monitoring Windows Kernel Drivers

Code from process of reversing Sysinternals Suite for educational purposes, with videos to associate them

Scoop bucket for Sysinternals

Exploring Python3 Language from a Computing Perspective

Anti-Ransomware to mitigate and neutralize Ryuk Threat.

A PowerShell script to prevent Sysmon from writing its events

A command line tool that sends its input data to a running procmon instance.

A re-creation of SysInternals BGInfo that doesn't touch the desktop wallpaper.

APC Injection is a code injection technique which bypasses TLS callback protections (Windows OS)

Small footprint executable triggering desktop background refreshes, helping to improve user experience and accessibility in VDI environments.

GatOS is an x86 kernel serving as the foundational layer of the PawStack toolchain

This repository contains tools and utilities used for developer

Quality of life improvements for Sysinternal's BgInfo

A no-install, thumb-drive friendly, PowerShell toolkit that runs a curated set of Sysinternals and Windows checks and produces a detailed log/summary file.

Development repository for the sysinternals cookbook

A Sysmon Install script using the Powershell Application Deployment Toolkit

Frontend for Handle viewer of Windows Sysinternals

See Your Trace Statements in Process Monitor!

Applied SOC Analysis and Incident Response documentation covering endpoint forensics, network traffic analysis (PCAP), and detection engineering. Demonstrating analyst-level investigative methodology using Splunk, Wireshark, and Sysinternals.

A robust Python utility designed for downloading and extracting optimization tools and scripts from GitHub repositories and Sysinternals, streamlining the Windows optimization process.

Chrome/Edge/Brave extension to open any selected Windows Registry path in Regedit using Sysinternals RegJump

Wixsharp based installed MSI for Sysmon and rules from the SwiftOnSecurity project