Security assessment, threat detection, and continuous monitoring module for Google Workspace, Active Directory, and Microsoft cloud environments. Includes Google Workspace compromise assessment with 23 detection signals, Active Directory reconnaissance (205 security checks across 15 categories including transitive Tier-0 attack-path analysis, NTLM-... More info

Real-time Windows Event Log monitoring and alerting module for PowerShell. EventMonitor.Windows enables security monitoring, automation, observability pipelines, SIEM integration, telemetry, and AI agent orchestration using EventLogWatcher for instant OS-level event delivery. Monitors 40+ event IDs across 17 groups: logon/logoff, failed authen... More info

Detects an intruder who is already inside a Microsoft Entra ID tenant. Plants decoy users, application registrations and client secrets that no legitimate process should ever touch, watches the Microsoft Graph sign-in and directory audit logs for contact with them, and scores every touch through a calibrated false-positive suppression engine before... More info