We are going to make a windows security tool to proactively detect/prevent a potential windows threat/hack/penetration, and show a timeline for various events (such as file and lateral movement, and system activities such as process creation/deletion, and use of powershell and processes) occurring over a intranet considering each system as a node.
We will mainly be targeting enterprise's for protection of individual computers as well as networks.