Microsoft
First published on TechNet on Apr 16, 2012

NotMyFault : Notmyfault is a tool used in the Windows Internals books to show how common device driver bugs affect a system. This update includes numerous enhancements contributed by Dan Pearson , including new crash types, a revamped user interface, and it reports of the amount of pool it has leaked.


Process Monitor v3.01 : This update to Process Monitor, a real-time file, registry, process and network monitor, adds decoding of several new Windows 8 file system control codes, including offload read and write, and now obtains image version information for 32-bit DLLs when run on 64-bit Windows.


TestLimit v5.2 : Testlimit, a demonstration tool used in the Windows Internals books to illustrate resource usage concepts, has minor enhancements including filling memory that it allocates with an identifiable string.


Mark’s Webcasts - Zero Day: A Non-Fiction View : Mark makes the case for how his hit cyberthriller, Zero Day, is likely to be realized  in non-fiction form in this 20-minute short version of his popular RSA Conference session.


Windows Internals 6 th Edition, Part 1 : We’re excited to announce that Part 1 of Windows Internals, 6 th Edition, is now available for order in hard copy and multiple ebook formats. This edition, like previous ones, makes heavy use of the Sysinternals to demonstrate key concepts. It covers Windows 7 and Windows Server 2008 R2 and the amount of new material required splitting the book into two volumes (Part 2 will be available soon). The first volume includes system concepts; architecture overview; system mechanisms; management mechanisms; processes, threads and jobs; security; and networking.