sysinternals-alternative

Free, open-source, transparent security suite for Windows, in the spirit of Objective-See: persistence scanner + real-time persistence alerts (Guardian), per-app outbound firewall (WFP), camera/mic & connection visibility, catalog-aware Authenticode. Local-only, no telemetry.

启视 BootScope — Windows startup-item manager that sees what Task Manager can't: hidden registry hives (HKU\S-1-5-18, HKU\.DEFAULT), risk scoring with Authenticode verification, per-step undo, and optional AI triage. Single-file PowerShell + WPF, zero dependencies.

A single-executable Windows process monitor that compares the running process list against a path-verified reference snapshot and shows what changed. No service, no driver, no network access.

Linux Alternative for Sysinternals Autoruns

Passive process forensics for Windows, Linux and macOS. Records process behavior locally and produces an AI-ready evidence bundle.

Open-source Windows process optimizer — clean-room reimplementation of Process Lasso core features (ProBalance-style restraint, SmartTrim, process rules, power automation). C#/.NET 8 WinForms, single-file, prolasso.ini-compatible.