Overwatch 2.0 is a rebuild around one question: who or what touched this computer, and when.
New
- Web dashboard (local, 127.0.0.1) in a native window, replacing the old Tkinter GUI. Plain-English event feed: "Someone signed in to this computer", "A USB drive was plugged in".
- Away Mode: flip one toggle when you step away. Every snoop-relevant event escalates to critical and pings Telegram immediately, even during silent hours.
- Presence detection: routine info alerts skip Telegram while you are actively at the keyboard. Auto, Quiet, and Loud modes in the tray menu.
- Session monitor: lock/unlock detection, no admin rights needed.
- Network monitor: Wi-Fi changes, new IP or gateway, optional outbound connection watch.
- Power monitor (laptops): charger unplugged or battery draining while you're away.
- Detailed mode: process analysis with command-line scoring, parent chains, and MITRE ATT&CK technique tags.
- Single-file
Overwatch.exe(attached below) built with PyInstaller. No Python install needed.
Changed
- Quieter by default: process and filesystem events log to the dashboard without pinging Telegram, and lock/unlock pushes only in Away Mode. Snoop signals (logins, sessions, USB, remote access, network, power) still push.
- Filesystem monitor now defaults to the folders a snoop would actually open: Documents, Desktop, Downloads, Pictures.
- Vortenia branding: lime-on-black dashboard, new tray icon.
Fixed
- RDP monitor no longer spams alerts at startup.
- USB disconnect events no longer read as "plugged in", and unnamed USB devices get a sensible fallback.
- Dashboard footer now reports the running version.
- Crash and data-loss bugs found in review.
Install (exe): download Overwatch.exe, run it, shield icon appears in the tray. Right-click it for Settings, enter your Telegram bot token and chat ID, then Send Test Alert. The exe is not code-signed, so Windows SmartScreen will warn on first run: choose "More info" then "Run anyway".
Install (from source): clone, run setup.ps1, double-click Overwatch.bat.
SHA256 7E0C7984009BA91D15272DB21786F884B35E4EBC408A5A122C8B322D5C517C6A
Requires Windows 10/11. MIT (c) Vortenia. https://vortenia.com