sysinternals

Sysmon configuration file template with default high-quality event tracing

A Linux version of the ProcDump Sysinternals tool

Utilities for Sysmon

Advanced Sysmon ATT&CK configuration focusing on Detecting the Most Techniques per Data source in MITRE ATT&CK, Provide Visibility into Forensic Artifact Events for UEBA, Detect Exploitation events with wide CVE Coverage, and Risk Scoring of CVE, UEBA, Forensic, and MITRE ATT&CK Events.

A Windows Batch script and a Unix Bash script to comprehensively collect host forensic data during incident response.

Secure delete files with right click. GUI for Sysinternals SDelete tool

Various tools besides Msys2 that I've found useful to have available on windows. Create an issue if you have anything you want to add, want some binaries updated, or you think that some of them should be moved or re-moved.

AwesomeWallpaper plays videos, shows images and system info on your desktop wallpaper

Volatility Explorer Suit (volatility 3)

A ProcMon-esque tool for monitoring Windows Kernel Drivers

Process Hacker 2 Extended Edition — Advanced System Monitoring & Memory Management Suite. Enhanced Kernel-Level Access, Process Security Research Tool, and Real-Time Resource Analysis. Optimized for Windows 10/11 with Extended Plugin Support and Unlocked System Privileges.

Scoop bucket for Sysinternals

Code from process of reversing Sysinternals Suite for educational purposes, with videos to associate them

Exploring Python3 Language from a Computing Perspective

Anti-Ransomware to mitigate and neutralize Ryuk Threat.

A PowerShell script to prevent Sysmon from writing its events

A command line tool that sends its input data to a running procmon instance.

APC Injection is a code injection technique which bypasses TLS callback protections (Windows OS)

A re-creation of SysInternals BGInfo that doesn't touch the desktop wallpaper.

ADM/ADMX administrative templates for managing Sysinternals tools via Group Policy across Windows environments.