procdump

Sysinternals Suite Updates

New Updates to the Sysinternals Suite

Process Monitor v2.7
This update to Process Monitor, a system monitoring utility, adds a new option to the process tree dialog that direct it to show just the timeline for displayed events, uses kernel-based thread profiling on Vista and higher for better performance, and includes a number of minor fixes and enhancements.

ProcDump v1.5
ProcDump now includes a new switch that enables the creation of a process dump upon process termination, which can help with troubleshooting unexpected process termination. It also fixes a bug where the -ma switch wouldn’t generate a full dump when combined with -r , the Windows 7-specific process reflection switch.

If you want to download these apps go to the Systinternals Live Site or go here for the whole updated package.

Posted in August that is Definitely worth a read.

Mark’s Blog: The Case of the Temporary Registry Profiles
In the latest post in Mark’s “Case of the Unexplained” series, he documents a perplexing case affecting many Microsoft and Citrix customers that Microsoft Customer Support Services solved with the use of Process Monitor’s boot logging and stack trace features.

Sysinternals Updates

There have been a lot of updates since i last blogged about this awesome set of tools, among those are updates to ProcDump, Autoruns, and PsLogList. The full details are here.

Another thing to mention is that Mark and David released the 5th Edition of their book, titled, “Windows Internals 5th Edition” You can check out the details herealso. Here is a small insert from their site.

Delve inside Windows architecture and internals:

• Understand how the core system and management mechanisms work—from the object manager to services to the registry
• Explore internal system data structures using tools like the kernel debugger
• Grasp the scheduler’s priority and CPU placement algorithms
• Go inside the Windows security model to see how it authorizes access to data
• Understand how Windows manages physical and virtual memory
• Tour the Windows networking stack from top to bottom— including APIs, protocol drivers, and network adapter drivers
• Troubleshoot file-system access problems and system boot problems
• Learn how to analyze crashes