Sysinternals Tools Updates

[Corrine]

From Sysmon v14.16

Sysmon v14.16
This Sysmon update fixes a regression on older versions of Windows.

[Corrine]

From ZoomIt v7.0

ZoomIt v7.0

This update to ZoomIt, a screen magnification and annotation tool, adds the ability to screen record cropped regions or a specific window, and lets you snip regions of the screen or zoomed views to the clipboard or to a file in a single gesture.

[Corrine]

From Process Monitor v3.94

Process Monitor v3.94

This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, improves handling of incomplete Procmon Log files (.pml), and restores "Copy All" functionality in the Event Properties window.

[Corrine]

Sysmon v15.0, Autoruns v14.1, and Process Monitor v3.95

Sysmon v15.0
This update to Sysmon, an advanced host security monitoring tool, sets the service to run as a protected process, hardening it against tampering, adds a new event, FileExecutableDetected, for when new executable images are saved to files, and fixes a system hang occurring in certain situations due to an interaction between network and file system events.
 
Autoruns v14.1
This update to Autoruns, a utility for monitoring startup items, fixes a bug with detecting non-shortcut files in startup folders, fixes a bug with handling non-UNC, non-absolute paths, and improves theming support.
 
Process Monitor v3.95
This update to Process Monitor fixes a crash on loading certain PML files and improves boot logging.

[Corrine]

ZoomIt v7.1, ProcDump 2.0 for Linux, Process Explorer v17.05, RDCMan v2.93 and VMMap v3.33

ZoomIt v7.1
This update to ZoomIt adds audio capture to screen recording.

ProcDump 2.0 for Linux
ProcDump for Linux, a flexible tool for manual and trigger-based process dump generation, receives two new .NET GC triggers (-gcm and -gcgen) and updates the existing memory trigger to allow for multiple thresholds.

Process Explorer v17.05
This update to Process Explorer, an advanced process, DLL, and handle viewing utility, fixes a crash generated by the process list, fixes a bug with thread affinity decoding on systems with multiple processor groups (more than 64 processors / cores), and makes Escape key handling more consistent.

RDCMan v2.93
This update to RDCMan, a tool for managing and connecting to Remote Desktop sessions, re-enables the option to scale thumbnails under the display settings.

VMMap v3.33
This update to VMMap, a tool that reports the virtual memory layout of a process, removes automatic loading of dbghelp.dll under "C:\Debuggers".

[Corrine]

ProcDump 2.2 for Linux, Sysmon 1.3 for Linux, Process Monitor v3.96, and SDelete v2.05

ProcDump 2.2 for Linux
This update to ProcDump for Linux adds support for Azure Linux and fixes a couple of memory leaks.
 
Sysmon 1.3 for Linux
This update to Sysmon for Linux adds support for file hashes and fixes a bug with rule case matching.
 
Process Monitor v3.96
This update to Process Monitor speeds up the clear events operation, adds a security fix, and several bug fixes.
 
SDelete v2.05
This update to SDelete, a command line utility for secure file deletion, fixes console output and improves command line parameter parsing.