Blog Post

Sysinternals Blog
1 MIN READ

Sysmon v11.0, LiveKD v5.63, Process Explorer v16.32, Coreinfo v3.5

Mark_Cook's avatar
Mark_Cook
Former Employee
Apr 28, 2020
Sysmon v11.0
This major update to Sysmon includes file delete monitoring and archive to help responders capture attacker tools, adds an option to disable reverse DNS lookup, replaces empty fields with ‘-‘ to work around a WEF bug, fixes an issue that caused some ProcessAccess events to drop, and doesn’t hash main data streams that are marked as being stored in the cloud.
 
LiveKD v5.63
This update fixes a regression with enumerating and dumping Hyper-V partitions on recent versions of Windows 10.
 
Coreinvo v3.5
This release of Coreinfo, a tool that shows system CPU, memory and cache topology and information, now reports the status of restricted guest virtualization on Intel platforms.
 
Process Explorer v16.32
This update resolves an issue where the application icon in the tree view was displayed incorrectly.
Updated Apr 28, 2020
Version 1.0

4 Comments

  • siimon04's avatar
    siimon04
    Copper Contributor

    I second RossPresser wish. Ideally, Process Explorer would adopt the highly advanced filtering mechanism from Process Monitor.

  • RossPresser's avatar
    RossPresser
    Copper Contributor

    A very helpful feature would be to put a searchbox above the process list in Process Explorer.  The Find menu item is only for finding DLLs or handle names; sometimes I want to filter to "w3wp.exe" processes, or just find a particular Title.  For now I get around it by sorting by that column and scrolling, but on some busy servers that's tedious.

  • chrisb1845's avatar
    chrisb1845
    Copper Contributor

    It would be great if Process Explorer could show historical charts - it is a great monitoring tool.

    Unfortunately, charts are only limited to the width of popup window.

  • Melchior150's avatar
    Melchior150
    Copper Contributor

    I am always happy to see an update for Process Explorer... which is the SysInternals tool I use most often..