#ProcExp

When thinking about core Windows endpoint troubleshooting tools, #ProcExp, #ProcMon, #Fiddler, #Wireshark, and #WinDbg all come to mind. What else are folks using on a daily(ish) basis or couldn't live without? I'm putting a little something together.

I will make some videos about Process Explorer. What should definitely be in it? #sysinternals #processexplorer #procexp

and the award for highest open handle count I can ever remember seeing goes to .... Win11 (ARM) explorer.exe with a massive score of 6.2 million process handles!! 🎉 Restarting explorer has stopped my laptop running like a slug

@Onedrive isn't exactly innocent with 600K+ (process) handles & now at 722K just a few minutes later! I have a process dump if anyone from the #OneDrive Team wants it.

@onedrive I ran the Zombie hunting script I wrote for @ControlUp, which finds processes with process or thread handles open to processes that exiting but can't because of these open handles but @oneDrive not in there - #procexp shows handles to its own process

Long overdue update to my #procexp (Process Explorer) to support ports in iOS13 and provide more info: Sample output: Bonus: #xn00p zprint from iOS13 (for zone element sizes)

Publiqué un video acerca del Análisis Dinámico de Malware con #Procexp espero les sea útil. @markrussinovich @Sysinternals #DFIR #Malware

Got a high CPU consuming svchost.exe process & need to figure which of the services it hosts is guilty? @SysInternals Process Explorer #procexp to the rescue via the threads view. Can kill the thread from here too if service won't stop but that can be dangerous

As well as there being a new version of sysmon from @Sysinternals there also seems to have been a v16.22 release of #procexp Process Explorer which didn't make the What's New section on the home page but did make the blog:

Something crashed but crash dump generation is disabled? If the "Blah has stopped working" dialogue box is still displayed then you can get a dump by going to task manager (or @SysInternals #procdump or #procexp), right click crashed process & select "Create Dump File"

@vector_sec For example, what is procexp using to know this? #sysinternals #procexp

I really like #Sysinternals tools and I am learning them for several months now, but my eye really hurts after 30 minutes of working with them, @markrussinovich can you please add a #Dark_theme to the tools? especially #Procexp and #Procmon. Thank you very much.

2019 goal: get better at reverse engineering. Good friend of mine whipped up a debugger exercise I was able to bypass #wireshark #procmon #procexp and other detection but still cant bypass debugger detection... yet anyway #x32 #RE #Emotet #Dridex

Debugging an application using Sysinternals Process Monitor and Process Explorer @shanselman #procmon #procexp

«Best way to check for #malware» (w/@SysInternals #ProcExp & @VirusTotal AV engines), by @RogerAGrimes, @InfoWorld →

It's finally happening: AAPL has made me an offer I can't refuse (remote + my #jtool2/#Procexp integrated into MacOS), so I'll be joining the fine folks @ the mothership this summer as #XNU architect! 😊 I'll still sell #MOXiI, but no updates. My 0-days&design flaws are dowry 😞

I will be doing a talk on #sysinternals tools @nullDubai on 16th and @Nullblr on 17th Dec. Will cover #procexp, #procmon, #psexec and more.

Astucieux #sysinternals #hijack #procexp

Debugging an application using Sysinternals Process Monitor and Process Explorer @shanselman #procmon #procexp

Need a quick check for viruses? Use the #VirusTotal.com option for Process Explorer. Download it here: #procexp