Volatility Explorer Suit (volatility 3)

Anti-Ransomware to mitigate and neutralize Ryuk Threat.

A robust Python utility designed for downloading and extracting optimization tools and scripts from GitHub repositories and Sysinternals, streamlining the Windows optimization process.

A python whois client that is intended to be a drop-in upgrade to the Windows sysinternals whois client with support for significantly more WHOIS formats and domains.

MCP server wrapping the Sysinternals tool suite (Handle, Sigcheck, PsList, AccessChk, ProcMon) for Windows process introspection, binary triage, and ACL audit. Ships zero binaries -- user provides Sysinternals install.

Complete security incident lifecycle from malware behavioral analysis to NIST incident response and phishing credential harvesting simulation

Lightweight Windows security audit and incident-response reporting tool.

Python script to index SysInternals procmon CSV exports into elasticsearch