wmi lateral movement detector — free browser tool | fatcousin | fatcousin

tools→browse every utility in one place.manifesto→why fatcousin exists — local-first, no uploads.

ready

local

// fatcousin · local process monitor

00:00:00

// session started —

// tool · wmi-lateral-movement-detector

// origin · —

// user agent · —

// verdict · files processed locally · verify by watching NET events below

▮

NET · no outbound requests · all processing local

this panel shows everything. if something looks wrong, it is wrong. that's the contract.

drop wmi-activity operational evtx csv · 5857–5861 subscriptions · wmiPrvSE 4688 children · 4624 type 3 correlation · csv export · runs locally

[evtx csvs]

drop wmi-activity evtx csv

or click

Select file

drop security evtx csv (4688 + 4624)

or click

Select file

drop wmi-activity and/or security evtx csv