Overwatch Vortenia

Overwatch is a lightweight Windows tray monitor designed to track who or what accessed your PC and when. It records login events, USB device insertions, network changes, file access in specific folders, and process launches, presenting this information in a plain-English dashboard. The software can send Telegram alerts for suspicious activity while you're away.

Key Features:

• Login Monitoring: Tracks interactive and remote logons, lock/unlock events, and session details without requiring admin rights.
• USB Detection: Alerts when USB devices are plugged in or removed, including vendor and product IDs.
• Network Activity: Monitors Wi-Fi changes, new IP addresses, and gateway updates.
• File Access Tracking: Watches activity in critical folders like Documents, Desktop, Downloads, and Pictures.
• Process Monitoring: Includes a watchlist with command-line scoring, parent chains, and MITRE ATT&CK technique tags for detailed analysis.
• Telegram Alerts: Sends instant notifications for detected events while you're away.

Target Audience and Benefits: Ideal for small businesses, IT admins, and remote workers who need security monitoring without the complexity of a full SIEM. Overwatch provides clear visibility into PC activity with minimal setup, ensuring peace of mind for anyone concerned about unauthorized access.

Overwatch is available via Winget, making it easy to deploy using the winget command line.