ThreatSource Web

Windows security incident investigation using Microsoft Defender and Chrome evid

by Linwood Raynor

Oct 30, 2026 Security & Privacy

chrome extension cybersecurity incident investigation microsoft defender windows

Gallery

About

ThreatSource Web is a functional Windows 11 cybersecurity investigation prototype combining a Google Chrome extension with a native Windows companion written in Rust.It integrates Microsoft Defender security incidents with locally collected browser download information, allowing users to investigate threats, review download activity and examine available source evidence.Implemented features include:Microsoft Defender incident monitoring and historyDetailed threat reports and event timelinesChrome download monitoring and source analysisDownload URLs, redirects and available referrer informationSource evidence classificationsNative Windows companion with Chrome Native MessagingLocal SQLite databaseSecurity notifications and revisit warningsSettings and developer diagnosticsTechnology stack: Rust, TypeScript, Preact, Chrome Manifest V3, SQLite and Windows API.The project has been developed and tested locally on Windows 11. It includes automated tests, existing technical documentation and a working English-language interface.ThreatSource Web is a development prototype, not a finished commercial product. Additional development, validation and production-readiness work remain.The entire project is available for acquisition, including source code and seller-owned transferable intellectual property rights, subject to the final agreement and third-party licenses.