Procmon

18-tool Windows process monitoring MCP server for security researchers, covering ETW tracing, PE analysis, event logs, services, and drivers.