Sysinternals 2024.23.07

Sysinternals Suite 2024.23.07 release notes:

• Procmon 2.0 voor Linux - Process Monitor voor Linux, een handige en efficiënte manier voor ontwikkelaars om de syscall-activiteit op het systeem te traceren, is nu bijgewerkt voor ondersteuning van een breder scala aan Linux-distributies.
• Sysmon v15.15 - Deze update van Sysmon lost een hang op die optreedt wanneer het geheugen beperkt is, verbetert de prestaties van FsFilter en lost twee zeldzame crashes op die gerelateerd zijn aan FileBlockShredding en PipeEvent.

• Process Explorer - This update to Process Explorer, an advanced process, DLL and handle viewing utility, adds dark theme support, multipane view in the main window with a new threads pane, startup performance optimization and more.
• Handle - This update to Handle, a tool that displays information about open handles for any process in the system, adds CSV output with a new -v switch and has an option to print the granted access mask with -g.
• Process Monitor - This update to Process Monitor, a utility for observing in real time file system, Registry, and process or thread activity, adds a command-line option for setting the filter driver’s altitude.
• Sysmon - This update to Sysmon, an advanced host monitoring tool, fixes a bug preventing FileDeleteDetected events reporting and adds support for ARM64.

• Sysmon v14.1 - This update to Sysmon, an advanced host monitoring tool, adds a new event type, FileBlockShredding that prevents wiping tools such as Sysinternals SDelete from corrupting and deleting files.
• Coreinfo v3.6 - This update to Coreinfo, a utility that reports system CPU, memory and cache topology and information, now has an option (-d) for measuring inter-CPU latencies in counter ticks.
• AccessEnum v1.35 - This update to AccessEnum, a tool that summarizes account permissions on files and folders, fixes a version number mismatch in its version information.
• BgInfo v4.32 - This update to BgInfo, a tool for displaying system information on screen desktop, correctly reports Windows 11 Insider versions.
• NotMyFault v4.21 - This update to NotMyFault, a tool used to crash, hang, and cause kernel memory leaks on Windows, now works on ARM64 systems.

Changes in Sysinternals Suite 2022.08.16:

• Sysmon v14.0 - This major update to Sysmon, an advanced host monitoring tool, adds a new event type, FileBlockExecutable that prevents processes from creating executable files in specified locations. It also includes several performance improvements and bug fixes.
• AccessEnum v1.34 - AccessEnum, a tool for enumerating file system and registry permissions, now supports paths longer than MAX_PATH characters.
• Coreinfo v3.53 - This update to Coreinfo, a utility that reports system CPU, memory and cache topology and information, now handles NUMA nodes with more than 64 processors.

Changes in Sysinternals Suite 2022.07.30:

• ZoomIt v6.01 - This release for ZoomIt fixes a 32 bit bug.
• BgInfo v4.31 - This release for BgInfo fixes a 32 bit crash.
• ProcMon v3.91 - This release for Process Monitor fixes an ARM64 driver load error.

Changes in Sysinternals Suite 2022.07.19:

• ZoomIt v6.0 - This major update to ZoomIt, a screen magnification and annotation tool, adds built-in screen recording for easy demo recordings, and now supports Unicode typing input.
• BgInfo v4.30 - This update to BgInfo, a tool for writing various system information to the desktop wallpaper, now correctly reports Windows 11 and Windows Server 2022 versions.
• PsExec v2.40 - This update to PsExec, a command line utility for remotely launching processes on Windows computers, adds a new option, -g, for selecting the processor group.
• ProcMon v3.90 - This Process Monitor update improves event list filtering performance.
• Sigcheck v2.90 - Sigcheck, a command-line utility that shows file version, timestamp and signatures, now supports custom code integrity policy file checks.

zie download pagina website voor alle details

Changes in Sysinternals Suite 2022.05.11:

• AccessChk v6.15 - Update AccessChk, het tool om aan te geven welke gebruikers of groepen toegang hebben tot bestanden, folders, registersleutels, objecten en services. Daardoor worden nu langere command lijnen opgevangen, want géén beperking in lengte meer.
• RAMMAp v1.61 - Up RAMMap, tool voor analyse van geheugengebruik, betere tabs voor processen in Windows 11 en betere interface op scherm met geschaalde weergave.
• Sysmon v13.34 - Deze Sysmon update verbetert de performantie voor UDP network event tracing (de algemene NetworkConnect optie), lost een zeldzaam maar mogelijk probleem met een system hang (blue screen) op bij het monitoren van ProcessCreate events en doet iets aan een memory/handle lek bij ImageLoad events met welbepaalde exclude filters.

Wijzigingen :

• Autoruns v14.09 - Deze Autoruns update lost een bug op waardoor startup folder items niet in- of uitgeschakeld konden worden.
• Process Monitor v3.89 - Deze Process Monitor corrigeert voor een crash die terug te brengen was tot context menus.
• Sysmon v13.33 - Deze Sysmon update zorgt voor stabiliteit op een Windows Server 2012 en verbeterde het geheugengebruik.
• ZoomIt v5.10 - ZoomIt ondersteund nu ook pen en touch tekenen.

• ZoomIt v5.0 - ZoomIt, a screen zoom and annotation tool, now supports Windows 11 and antialiased line drawing. Note that under Windows 11 and Windows Server 2022 some UI elements might not react to mouse clicks when zoomed. The temporary workaround until a future Windows update is to store the ZoomIt executable under the Windows or the Program Files directories.
• RDCMan v2.90 - RDCMan, a tool for managing and connecting to Remote Desktop sessions, receives support for Restricted Admin (/restrictedAdmin from mstsc) and Remote Credential Guard (/remoteGuard from mstsc) and bug fixes.
• Autoruns v14.08 - This Autoruns update fixes a series of application crashes, now correctly parses paths with spaces passed as command line arguments and improves .arn import functionality.
• TCPView v4.17 - This TCPView update fixes a crash related to filtering by TCP version.
• VMMap v3.32 - VMMap, a tool that reports the virtual memory layout of a process, now supports Windows 11.
• Sysmon v13.32 - This Sysmon update fixes a conflict with FileDelete and FileDeleteDetected events in the same config.
• WinObj v3.14 - This WinObj update makes the behavior of the object tree control more consistent with Windows when handling right clicks.