LotL-Watcher is a lightweight security monitoring tool designed to detect and mitigate "Living-off-the-Land" attacks. Instead of relying on traditional file signatures, this tool monitors the behavior of trusted Windows binaries (like certutil, powershell, wmic, mshta).
cybersecurity threat-hunting defense process-monitoring malware-detection blue-team edr security-tool windows-security lotl mitre-att-ck
-
Updated
Feb 3, 2026 - C#