Sysinternals Tools Updates

Corrine · April 13, 2023, 02:10:27 AM

From Sysmon v14.16

Sysmon v14.16
This Sysmon update fixes a regression on older versions of Windows.

Corrine · May 24, 2023, 03:56:00 PM

From ZoomIt v7.0

ZoomIt v7.0

This update to ZoomIt, a screen magnification and annotation tool, adds the ability to screen record cropped regions or a specific window, and lets you snip regions of the screen or zoomed views to the clipboard or to a file in a single gesture.

Corrine · June 08, 2023, 06:53:09 PM

From Process Monitor v3.94

Process Monitor v3.94

This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, improves handling of incomplete Procmon Log files (.pml), and restores "Copy All" functionality in the Event Properties window.

Corrine · June 27, 2023, 07:32:25 PM

Sysmon v15.0, Autoruns v14.1, and Process Monitor v3.95

Sysmon v15.0
This update to Sysmon, an advanced host security monitoring tool, sets the service to run as a protected process, hardening it against tampering, adds a new event, FileExecutableDetected, for when new executable images are saved to files, and fixes a system hang occurring in certain situations due to an interaction between network and file system events.

Autoruns v14.1
This update to Autoruns, a utility for monitoring startup items, fixes a bug with detecting non-shortcut files in startup folders, fixes a bug with handling non-UNC, non-absolute paths, and improves theming support.

Process Monitor v3.95
This update to Process Monitor fixes a crash on loading certain PML files and improves boot logging.

Corrine · July 26, 2023, 06:22:22 PM

ZoomIt v7.1, ProcDump 2.0 for Linux, Process Explorer v17.05, RDCMan v2.93 and VMMap v3.33

ZoomIt v7.1
This update to ZoomIt adds audio capture to screen recording.

ProcDump 2.0 for Linux
ProcDump for Linux, a flexible tool for manual and trigger-based process dump generation, receives two new .NET GC triggers (-gcm and -gcgen) and updates the existing memory trigger to allow for multiple thresholds.

Process Explorer v17.05
This update to Process Explorer, an advanced process, DLL, and handle viewing utility, fixes a crash generated by the process list, fixes a bug with thread affinity decoding on systems with multiple processor groups (more than 64 processors / cores), and makes Escape key handling more consistent.

RDCMan v2.93
This update to RDCMan, a tool for managing and connecting to Remote Desktop sessions, re-enables the option to scale thumbnails under the display settings.

VMMap v3.33
This update to VMMap, a tool that reports the virtual memory layout of a process, removes automatic loading of dbghelp.dll under "C:\Debuggers".

Corrine · September 29, 2023, 08:00:53 PM

ProcDump 2.2 for Linux, Sysmon 1.3 for Linux, Process Monitor v3.96, and SDelete v2.05

ProcDump 2.2 for Linux
This update to ProcDump for Linux adds support for Azure Linux and fixes a couple of memory leaks.

Sysmon 1.3 for Linux
This update to Sysmon for Linux adds support for file hashes and fixes a bug with rule case matching.

Process Monitor v3.96
This update to Process Monitor speeds up the clear events operation, adds a security fix, and several bug fixes.

SDelete v2.05
This update to SDelete, a command line utility for secure file deletion, fixes console output and improves command line parameter parsing.

Corrine · October 05, 2023, 10:03:48 PM

Sysmon 1.3.1 for Linux

This update to Sysmon for Linux fixes file hashing for Linux distributions without OpenSSL 1.1.

Corrine · October 19, 2023, 02:12:52 AM

VMMap v3.4

VMMap v3.4
This update to VMMap, a virtual and physical memory analysis utility, adds support for .NET 6 and higher, including .NET 8 preview.

Corrine · November 09, 2023, 10:52:53 PM

Sysmon v15.1 and ZoomIt v7.2

Sysmon v15.1
This update to Sysmon improves file hash and delete performance, adds a summary message on events dropped due to high system load, fixes a crash during uninstall, and fixes a system hang.

ZoomIt v7.2
This update to ZoomIt adds translucent highlighter and blur to draw mode, microphone selection for recording, and copies the recorded file to the clipboard.

Corrine · January 10, 2024, 01:49:56 PM

Sysmon v15.12

Sysmon v15.12
This update to Sysmon fixes a case of system hanging on uninstall, a crash occurring while parsing configuration files, and a memory leak.

Corrine · February 07, 2024, 03:50:47 PM

ProcDump 3.2 for Linux, ZoomIt v8.0, and Autoruns v14.11

ZoomIt v8.0
This update to ZoomIt adds a new feature called DemoType that automates typing.

Autoruns v14.11
This update to Autoruns fixes a bug parsing parameters in startup folder items.

Corrine · February 14, 2024, 03:15:40 AM

Sysmon v15.14

Sysmon v15.14
This update to Sysmon resolves a service crash on configuration change and a rare system crash.

Corrine · June 01, 2024, 07:08:16 PM

ProcDump 3.3 for Linux and Process Explorer v17.06

ProcDump 3.3 for Linux
This update to ProcDump for Linux includes improvements related to containerized workflows.

Process Explorer v17.06
This update to Process Explorer fixes an issue resulting in the application window not being displayed, and updates the process suspend and resume menu items.

Corrine · June 22, 2024, 02:03:29 AM

Process Monitor v4.01

This update to Process Monitor colorizes the activity operation icons - Registry, File System, Network, Process and Thread, and Profiling Events.

Available from https://t.co/zlch58GEpK.

Corrine · July 23, 2024, 05:07:55 PM

Process Monitor 2.0 for Linux and Sysmon v15.15

Procmon 2.0 for Linux
Process Monitor for Linux, a convenient and efficient way for developers to trace the syscall activity on the system, is now updated to support a broader range of Linux distributions.

Sysmon v15.15
This update to Sysmon fixes a hang occurring when memory is constrained, improves FsFilter performance, and fixes two rare crashes related to FileBlockShredding and PipeEvent.