FileGuardian (private build)

A private build of FileGuardian is in development. It pairs FileGuardian's artifact preservation with ZBS Sensor, a separate Windows telemetry collector, so process and file activity can be reviewed alongside the captured files.

Artifact capture works as it does in the public release and never waits on telemetry. A separate full-window Sensor workspace holds the collection controls, a searchable process tree built from recordings, and correlation of file requests with preserved artifacts.

Direct observations, inferred links, and unknowns are kept apart, and collection gaps and loss are reported.

This is a development build and has not been released. The process tree currently reads completed recordings; a live view is planned. ZBS Sensor is not a sandbox: it reports what it measured, and missing telemetry is not evidence that nothing happened.

Previous
Previous

File Guardian Monitor (all platforms)