RECONIFIED
  • [ Home ]
  • [ Platform ]
  • [ Features ]
  • [ Coverage ]
  • [ About ]
  • Request a demo
Request a demo
// Coverage //

Detect, respond and extend in one build

See what is included

Detect

User-mode sensors and local storage on one Windows PC.

Included
Always on

Respond

Containment through a one-shot elevated helper, gated by consent.

Included
Consent-gated

Extend (XDR)

Optional connectors for identity, threat intel, SIEM and SOAR.

Included
Opt-in

What it collects

Sensor scans run on a 3-second cycle and host resources are sampled about once a second.


Process DNA with SHA-256 and Authenticode

Connection table, DNS cache and ETW bytes

Run keys, tasks, WMI, services and drivers

AMSI events, hash matches and RWX memory
Request a demo
Learn more


What it can do

Each action is a direct Windows API or netsh call inside reconified-elevated.exe, after UAC.


Terminate a process or process tree

Block an IP or isolate the host

Quarantine files and control services

Allowlisted live response checks
Request a demo
Learn more


What it connects to

Nothing is uploaded unless a destination is configured.


Entra risk detections and M365 alerts

TAXII 2.1 threat-intel feeds

SIEM export to your destination

SOAR webhooks you define
Request a demo
Learn more

// Frequently asked questions //

Have a question?

Straight answers about what RECONIFIED does and does not do on a Windows PC.

01/

Does RECONIFIED install a kernel driver or a service?

No. Collection and response run in user mode through documented Windows APIs. Two executables ship: the medium-integrity console and a one-shot elevated helper that exits after each action.

02/

What does the XDR side connect to?

Only what you configure: Entra risk detections and Microsoft 365 alerts through Graph, a TAXII 2.1 threat-intel server, a SIEM export destination and SOAR webhooks. With nothing configured, nothing leaves the PC.

03/

Which platforms are supported?

Windows only, one PC per console. A multi-tenant cloud console and a central policy server are not part of this build. Non-Windows builds of the sensor crate return UnsupportedPlatform.

04/

Can RECONIFIED act without my approval?

No. Every privileged action needs a matching operator grant and the elevated helper, and Windows shows UAC unless the helper is already elevated. Automatic termination and isolation stay off until you enable them.

RECONIFIED
Contact us
Email address
info@reconified.com
Platform
Windows, single host
Product
  • Home
  • Platform
  • Features
  • Coverage
  • About
  • Contact
Legal
  • Privacy Policy
  • Terms of Use
Copyright © RECONIFIED. Windows EDR/XDR console, version 1.0.