Sysmon v13.30
This Sysmon update adds user fields for events, fixes a series of crash-causing bugs - for example with the Visual Studio debugger - and improves memory usage and management in the driver.
Don't for get to go to the downloads properties and select unblock, other wise you can/will get constant warning from Windows security.
Last edited by Cliff S; 26 Oct 2021 at 15:25.
Thanks for the links.
I'm running Win 7 and have used several of the Sysinternals tools a few years.
Are the Sysinternals tools running ok on Win 10? I'm thinking about upgrading to 10 soon and read somewhere else that Sysinternals tools used a lot of memory and were problematic (I'm being diplomatic characterizing the quote I read).
Since I've not experienced any Sysinternals issues with Win 7x64 Home Premium OEM, I was wondering how the Win 10 users' experiences have been with the tools.
Hi Cliff S,
Just wondered if you'd come across these to autoupdate Sysinternals tools:
a bat script - I have it scheduled:
Batch Script to Auto Update Sysinternals Tools
an exe (3rd item - not used for ages, so don't know if still valid) :
Freeware made by Emiel Wieldraaijer
I have never seen them before, looks interesting.
Usually I just check the site, a few time a month.
Maybe I'll give each a shot(of course one at a time).
Thanks for the info
The tools in Sysinternals don't have any eye candy, but therefore they are fast and specialized.
My latest "toy" has been TCPView with integrated "Whois".
An example is File Explorer:
(I'm guessing because of Windows Search & Cortana)
The Whois:
Code:Domain ID: 4569290_DOMAIN_COM-VRSN Registrar WHOIS Server: whois.markmonitor.com Registrar URL: http://www.markmonitor.com Updated Date: 2014-10-15T04:00:14-0700 Creation Date: 1994-11-09T21:00:00-0800 Registrar Registration Expiration Date: 2022-06-04T09:44:29-0700 Registrar: MarkMonitor, Inc. Registrar IANA ID: 292 Registrar Abuse Contact Email: abusecomplaints@markmonitor.com Registrar Abuse Contact Phone: +1.2083895740 Domain Status: clientUpdateProhibited (https://www.icann.org/epp#clientUpdateProhibited) Domain Status: clientTransferProhibited (https://www.icann.org/epp#clientTransferProhibited) Domain Status: clientDeleteProhibited (https://www.icann.org/epp#clientDeleteProhibited) Domain Status: serverUpdateProhibited (https://www.icann.org/epp#serverUpdateProhibited) Domain Status: serverTransferProhibited (https://www.icann.org/epp#serverTransferProhibited) Domain Status: serverDeleteProhibited (https://www.icann.org/epp#serverDeleteProhibited) Registry Registrant ID: Registrant Name: Domain Administrator Registrant Organization: Microsoft Corporation Registrant Street: One Microsoft Way, Registrant City: Redmond Registrant State/Province: WA Registrant Postal Code: 98052 Registrant Country: US Registrant Phone: +1.4258828080 Registrant Phone Ext: Registrant Fax: +1.4259367329 Registrant Fax Ext: Registrant Email: domains@microsoft.com Registry Admin ID: Admin Name: Domain Administrator Admin Organization: Microsoft Corporation Admin Street: One Microsoft Way, Admin City: Redmond Admin State/Province: WA Admin Postal Code: 98052 Admin Country: US Admin Phone: +1.4258828080 Admin Phone Ext:
Quote
