Live data from Hacker News

Windows Sysinternals: advanced system utilities and technical information

docs.microsoft.com

11–20 of 26 posts

Re: Windows Sysinternals: advanced system utilities and technical information

#11
When I worked as a Windows admin, the SysInternals tools were usually among the first things I installed on a new server or workstation.

Personally, I do not understand why Microsoft does not include them by default on Windows, they are just so useful.

Re: Windows Sysinternals: advanced system utilities and technical information

#12
post #7

Ah, good old days of using these to disable auto-run programs (with some of them viruses) on Windows XP and 7. And procexp! It's just the better task manager.

ProcessHacker ( https://processhacker.sourceforge.io/ ) is also a worthy competitor to the Process Explorer.

I second that, because ProcessHacker was the only tool I found to let me set the I/O priority of a process.

Re: Windows Sysinternals: advanced system utilities and technical information

#13
post #11

When I worked as a Windows admin, the SysInternals tools were usually among the first things I installed on a new server or workstation. Personally, I do not understand why Microsoft does not include them by default on Windows, they are just so useful.

My guess is that they're not included due to internal politics. They were developed by Russinovich before he joined of Microsoft. I believe he mentioned in an interview that he used some undocumented windows APIs and that some Microsoft engineers were not happy about that.

BTW another great diagnostics tools for Windows that I've come across is the Windows Performance Analyzer. One needed to install it separately before, not sure about that nowadays.

Re: Windows Sysinternals: advanced system utilities and technical information

#14
post #5

I‘m on Mac and Linux since 10 years now, but Sysinternals is the one thing that kept me on Windows for the 10 years before as a hacker. It was the first thing that landed on any new machine and let me learn and debug so many things about my computer. Microsoft did the right thing to assimilate them, the guy behind was top notch and I remember them fondly. Don‘t know how they evolved the last decade though.

True that. The guy was top notch indeed and is now CTO of Azure.

Re: Windows Sysinternals: advanced system utilities and technical information

#15
post #5

I‘m on Mac and Linux since 10 years now, but Sysinternals is the one thing that kept me on Windows for the 10 years before as a hacker. It was the first thing that landed on any new machine and let me learn and debug so many things about my computer. Microsoft did the right thing to assimilate them, the guy behind was top notch and I remember them fondly. Don‘t know how they evolved the last decade though.

Ditto here. And Russinovic was the one who revealed the infamous sony rootkit using these tools IIRC. Great memories of my time when I used Windows.

Re: Windows Sysinternals: advanced system utilities and technical information

#16
post #15
post #5

I‘m on Mac and Linux since 10 years now, but Sysinternals is the one thing that kept me on Windows for the 10 years before as a hacker. It was the first thing that landed on any new machine and let me learn and debug so many things about my computer. Microsoft did the right thing to assimilate them, the guy behind was top notch and I remember them fondly. Don‘t know how they evolved the last decade though.

Ditto here. And Russinovic was the one who revealed the infamous sony rootkit using these tools IIRC. Great memories of my time when I used Windows.

So that's why RootkitRevealer does not work with newer versions of Windows.

Re: Windows Sysinternals: advanced system utilities and technical information

#18

Since yesteryears, my core tool set of choice has been: - sysinternals - nirsoft - UnxUtils - powershell - powertoys RE: powershell ... yup Russinovic gave us that too :)

Is there an alternative to Everything [1](file search with immediate results) and Ditto [2](clipboard manager) among those you've listed ? I can't live without them on Windows to be honest.

[1] http://www.voidtools.com/support/everything/ [2] https://github.com/sabrogden/Ditto/wiki

Re: Windows Sysinternals: advanced system utilities and technical information

#19
post #18

Since yesteryears, my core tool set of choice has been: - sysinternals - nirsoft - UnxUtils - powershell - powertoys RE: powershell ... yup Russinovic gave us that too :)

Is there an alternative to Everything [1](file search with immediate results) and Ditto [2](clipboard manager) among those you've listed ? I can't live without them on Windows to be honest. [1] http://www.voidtools.com/support/everything/ [2] https://github.com/sabrogden/Ditto/wiki

Dammit, I forgot about VoidTools. Ditto looks interesting.

Re: Windows Sysinternals: advanced system utilities and technical information

#20
Use https://live.sysinternals.com to quickly grab one of these tools with no fuss

Process Monitor (ProcMon) is one of the best diagnostic tools on the planet. I’ve used it to find why my machine booted slowly (encrypted font?!), what sort of network activity is holding up an app, why my USB device was sucking at wake-from-sleep, etc.

Process Explorer (ProcExp) is amazing at inspecting processes, eg to see their environment variables, see what process integrity levels look like, find out what process has what path open (eg since Windows won’t let you delete open files), etc. It’s a good complement to Task Manager.

TCPView is great for some weird cases. I used it once to find a bad web server as I could see my http requests were failing when the load balancer sent me to a specific IP. This impressed my web developer friends who weren’t used to seeing really accessible but low level diagnostic tools.

All the memory tools are great too.

Post reply on HN