Download Sysinternals Suite 2016-04-28

Microsoft has released a new version of the Sysinternals Suite, with the date as the version number. This package is a collection of useful tools for managing systems and obtaining comprehensive information about the computer. In this way, all kinds of problems can be detected and solved.

The individual tools are being developed by Mark Russinovich and Bryce Cogswell, initially for Sysinternals and since 2006 for Microsoft. Some examples are Process Explorer, Bginfo, contig and disk mon. In total it is a collection of 69 different tools. By the way, the latest versions of the individual programs can also be here are being found. Since the previous edition, the following parts of the Suite have been updated:

Sysmon v4.0
This release of Sysmon, an advanced background monitor that records process-related activity to the event log for use in intrusion detection and forensics, introduces more powerful filtering capabilities, allowing for both include and exclude rules to be specified for specific events types, as well as complex matching on different event fields.

Product dump v8.0
Procdump, a utility for capturing process dump files based on CPU, memory, and other triggers, has improved support for lightweight reflection dumps on Windows 7 and Windows 8, now creates a named event that can be signaled by another process to gracefully terminate it, does more intelligent default path searches for the debugging tools libraries, and makes trigger timing and repeat behaviors consistent across trigger types.

Sign check v2.51
This update to Sigcheck, a command-line utility that reports detailed information about images, including their signatures and VirusTotal status, as well as certificate stores, now cleanses newline and other characters from CSV output to prevent line breaks.