Advanced Standalone Registry Forensic Engine & Task Scheduler Integrity Monitor
A high-performance, multi-threaded local daemon designed for proactive endpoint defense and zero-idle process vaporization under Windows environments. Built natively using pure WinAPI with a zero-framework footprint.

Stop wasting your RAM on corporate EDR overhead. Protect critical persistence points at the native OS sub-layer.

1. Multi-Threaded Footprint (High-Availability): The application decouples kernel-level network signaling from the file-registry integrity watchdog. The daemon splits execution into independent, low-overhead threads to avoid execution lag.
2. Asynchronous IPC Named Pipe (\\\\.\\pipe\\scidrow_edr): A dedicated background listener thread utilizes PIPE_WAIT blocking properties to sleep at the OS kernel level, consuming 0% CPU. Upon receiving an explicit 4-byte DWORD PID from the telemetry guard (scidrow_hunter), it instantly triggers the eviction sequence.
3. Process Tree Vaporizer: Instantly targets and flushes the malicious memory footprint via native TerminateProcess subroutines. Uses an explicit forensic termination signature (0XDEADC0DE) to trace programmatic evictions in host telemetry logs.
4. Registry Integrity Watchdog: The primary thread executes a high-velocity monitoring loop targeting critical persistence vectors (Winlogon\Shell and Userinit hives). Utilizes explicit KEY_WOW64_64KEY execution flags to completely bypass WoW64 subsystem virtualization and registry redirection.
5. Self-Healing & Fast Reset: If an unauthorized persistence modification attempt is detected (e.g., Lumma Stealer trying to hijack the shell parameter), Sniper forcefully overwrites the hive back to clean system defaults (explorer.exe), exits with a clean runtime code exit(0), and recycles the scanning context.

To compile the source code via MinGW (g++) into a standalone, portable x64 binary completely independent of external .dll runtime dependencies, execute:

g++ -O3 -Wall scidrow_sniper.cpp -o scidrow_sniper.exe -static -static-libgcc -static-libstdc++

The -O3 flag enables aggressive compiler loop-unrolling and optimization for legacy x86-64 hardware layers, while -static flags stitch the required C++ runtimes directly into the .exe core.

The compiled scidrow_sniper.exe binary must be executed with Elevated Privileges (Run as Administrator) to secure the required KEY_SET_VALUE rights for the HKLM registry hives.

This daemon is 100% free, telemetry-free, and open-source. If Scidrow Sniper optimized your system security or saved your hardware resources, consider supporting independent development.

• USDT (TRC-20) Wallet Address: TEWQScWrBB2B4brjWL5nfxrWzNwitTuD6i