Windows GUI tools for baseline-driven endpoint process and network monitoring that capture a snapshot of running processes and connections, then continuously track post-baseline changes without discarding history. They correlate data in a unified view, with an extended version integrating optional Sysmon telemetry for deeper timeline visibility.
windows malware process-monitor sysmon threat-hunting malware-analysis soc sysinternals network-traffic process-monitoring malware-detection blue-team sysmon-config windows-security network-traffic-analysis blue-team-tool security-operations-center live-process-monitor live-process-monitor-plus sysmon-configurator
-
Updated
Feb 15, 2026