https://github.com/brandothedev/compromisedetector

A Windows security auditing tool that detects potential signs of system compromise, such as suspicious processes, network connections, registry entries, and rogue administrator accounts.
https://github.com/brandothedev/compromisedetector

automated malware scanner suspicious tool windows

Last synced: 12 months ago
JSON representation

A Windows security auditing tool that detects potential signs of system compromise, such as suspicious processes, network connections, registry entries, and rogue administrator accounts.

• Host: GitHub
• URL: https://github.com/brandothedev/compromisedetector
• Owner: BrandoTheDev
• License: mit
• Created: 2025-03-24T19:32:11.000Z (over 1 year ago)
• Default Branch: main
• Last Pushed: 2025-03-24T19:38:00.000Z (over 1 year ago)
• Last Synced: 2025-03-24T20:31:35.904Z (over 1 year ago)
• Topics: automated, malware, scanner, suspicious, tool, windows
• Homepage:
• Size: 0 Bytes
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md
  • License: LICENSE

Awesome Lists containing this project

README

          
# 🛡️ Windows Compromise Detection Tool

A Windows security auditing tool that detects potential signs of system compromise, such as suspicious processes, network connections, registry entries, and rogue administrator accounts.

# 🚀 Features

    ✅ Detects suspicious processes running from Temp and AppData.

    🌐 Identifies suspicious network connections (remote IPs, unusual ports).

    🔍 Scans registry autoruns for malware persistence.

    👥 Lists user accounts, highlighting unexpected admin accounts.

    🔧 Detects Windows Defender tampering.

    🛠️ Shows running scheduled tasks and flagged PowerShell scripts.

# ⚙️ Requirements

    Windows OS

    .NET Core 5+ or .NET 6/7/8

    Admin privileges are required for full functionality.

# ⚠️ Disclaimer

    This tool is intended for educational and diagnostic purposes only.

    Use it responsibly. The author is not responsible for any misuse or damages caused by this program.

# 📄 License

This project is licensed under the MIT License – see the LICENSE file for details.