Sysinternals Blog

Options

2,475

MarkRussinovich on Jun 27 2019 12:20 PM

First published on TechNet on Jun 17, 2017 Sysmon v6.

1,272

MarkRussinovich on Jun 27 2019 12:20 PM

First published on TechNet on May 22, 2017 Sysmon v6.

1,630

MarkRussinovich on Jun 27 2019 12:20 PM

First published on TechNet on May 16, 2017 ProcDump v9This major update to ProcDump, a utility that enables process dump...

2,360

MarkRussinovich on Jun 27 2019 12:20 PM

First published on TechNet on Mar 14, 2017 Sysmon v6This release of Sysmon, a background monitor that records activity t...

1,168

MarkRussinovich on Jun 27 2019 12:20 PM

First published on TechNet on Feb 17, 2017 Sysmon v6This release of Sysmon, a background monitor that records activity t...

1,149

MarkRussinovich on Jun 27 2019 12:20 PM

First published on TechNet on Dec 01, 2016 Announcing a new book, Troubleshooting with the Windows Sysinternals ToolsBec...

1,014

MarkRussinovich on Jun 27 2019 12:19 PM

First published on TechNet on Dec 01, 2016 Sysmon v5This major update to Sysmon, a background monitor that records activ...

1,459

MarkRussinovich on Jun 27 2019 12:19 PM

First published on TechNet on Aug 29, 2016 Sysmon v4.

721

MarkRussinovich on Jun 27 2019 12:19 PM

First published on TechNet on Apr 28, 2016 Sysmon v4.

735

MarkRussinovich on Jun 27 2019 12:19 PM

First published on TechNet on Feb 02, 2016 Sigcheck v2.

635

MarkRussinovich on Jun 27 2019 12:19 PM

First published on TechNet on Jan 05, 2016 Sigcheck v2.

674

MarkRussinovich on Jun 27 2019 12:03 PM

First published on TechNet on Oct 26, 2015 Autoruns v13.

667

MarkRussinovich on Jun 27 2019 12:03 PM

First published on TechNet on Jul 22, 2015 Sysmon v3.

623

MarkRussinovich on Jun 27 2019 12:03 PM

First published on TechNet on May 26, 2015 AccessChk v6.

788

MarkRussinovich on Jun 27 2019 12:03 PM

First published on TechNet on Apr 20, 2015 Sysmon v3.

550

MarkRussinovich on Jun 27 2019 12:03 PM

First published on TechNet on Mar 10, 2015 LiveKd v5.

546

MarkRussinovich on Jun 27 2019 12:03 PM

First published on TechNet on Feb 09, 2015 Autoruns v13.

511

MarkRussinovich on Jun 27 2019 12:03 PM

First published on TechNet on Jan 29, 2015 Autoruns v13.

596

MarkRussinovich on Jun 27 2019 12:03 PM

First published on TechNet on Jan 19, 2015 Sysmon v2.

660

MarkRussinovich on Jun 27 2019 12:02 PM

First published on TechNet on Sep 11, 2014 Handle v4: Handle is a command-line utility that can show which processes hav...

823

MarkRussinovich on Jun 27 2019 12:02 PM

First published on TechNet on Aug 19, 2014 Autoruns v12.

586

MarkRussinovich on Jun 27 2019 12:02 PM

First published on TechNet on Aug 08, 2014 Sysmon v1.

529

MarkRussinovich on Jun 27 2019 12:02 PM

First published on TechNet on May 28, 2014 Mark's Latest Novel, Rogue Code: The third book in Mark’s Jeff Aiken technoth...

549

MarkRussinovich on Jun 27 2019 12:02 PM

First published on TechNet on May 13, 2014 Autoruns v12.

1,001

MarkRussinovich on Jun 27 2019 12:02 PM

First published on TechNet on May 02, 2014 AccessChk v5.

896

MarkRussinovich on Jun 27 2019 12:02 PM

First published on TechNet on Mar 07, 2014 Process Explorer v16.

523

MarkRussinovich on Jun 27 2019 12:02 PM

First published on TechNet on Feb 04, 2014 Process Explorer v16.

680

MarkRussinovich on Jun 27 2019 12:02 PM

First published on TechNet on Jan 29, 2014 Process Explorer v16.

1,482

MarkRussinovich on Jun 27 2019 12:01 PM

First published on TechNet on Jan 21, 2014 Disk2vhd v2.

501

MarkRussinovich on Jun 27 2019 12:01 PM

First published on TechNet on Dec 19, 2013 Coreinfo v3.

Latest Comments

in Sysmon v15.14 on May 09 2024 03:45 AM

Try it - the fixed crash can make the service lose communication with the driver, which could result in an infinite loop.

0 Likes

in Sysmon v15.14 on May 09 2024 03:42 AM

@Alex_Mihaiuc to be honest I haven't tried since there were no mentions of fixes for these behaviors in the release notes. Because I haven't figured out how to trigger either of these situations (high CPU utilization and/or missing file-related events ), upgrading multiple systems and waiting a whil...

0 Likes

in Sysmon v15.14 on May 09 2024 02:35 AM

@gportnoy can you still get this behavior with v15.14?

0 Likes

in Sysmon v15.14 on May 08 2024 01:52 PM

@Alex_Mihaiuc I wrote up a question/bug report here: https://learn.microsoft.com/en-us/answers/questions/1661446/sysmon-15-12-high-cpu-utilization-stops-logging-ce but wanted to cross-post here as well. I've since noticed that the two issues reported may not be connected.We are seeing systems stop l...

0 Likes

in Sysmon v15.14 on May 08 2024 03:38 AM

Hey @it82373, This is great feedback, thank you for taking the time to write it! Tracking all of your points; the goal is to make the tool "self-document" - meaningfully react to the configuration / runtime, and these are all baseline / expected software behaviors, also with @Shane_King's experience...

1 Likes