Sysmon v11.0, LiveKD v5.63, Process Explorer v16.32, Coreinfo v3.5

[Mark_Cook]

Sysmon v11.0

This major update to Sysmon includes file delete monitoring and archive to help responders capture attacker tools, adds an option to disable reverse DNS lookup, replaces empty fields with ‘-‘ to work around a WEF bug, fixes an issue that caused some ProcessAccess events to drop, and doesn’t hash main data streams that are marked as being stored in the cloud.

LiveKD v5.63
This update fixes a regression with enumerating and dumping Hyper-V partitions on recent versions of Windows 10.

Coreinvo v3.5
This release of Coreinfo, a tool that shows system CPU, memory and cache topology and information, now reports the status of restricted guest virtualization on Intel platforms.

Process Explorer v16.32
This update resolves an issue where the application icon in the tree view was displayed incorrectly.

[Melchior150]

I am always happy to see an update for Process Explorer... which is the SysInternals tool I use most often..

[chrisb1845]

It would be great if Process Explorer could show historical charts - it is a great monitoring tool.

Unfortunately, charts are only limited to the width of popup window.

[RossPresser]

A very helpful feature would be to put a searchbox above the process list in Process Explorer.  The Find menu item is only for finding DLLs or handle names; sometimes I want to filter to "w3wp.exe" processes, or just find a particular Title.  For now I get around it by sorting by that column and scrolling, but on some busy servers that's tedious.

[siimon04]

I second @RossPresser wish. Ideally, Process Explorer would adopt the highly advanced filtering mechanism from Process Monitor.