Usually refers to applications from the Sysinternals Suite (eg. Process Explorer, Process Monitor, RAMMap, ...)
103 questions- Bountied 0
- Unanswered
- Frequent
- Score
- Unanswered (my tags)
Is there any native way on windows or using sysinternals to scan what websites a process is accessing?
I am struggling to find a way to scan for websites an specific process on windows 10 os is accessing without having to get a commercial tool or without a full package tracing app like wireshark I was ... windows-10 networking sysinternals- 457
How to determine which PID sends specific DNS requests on Windows?
Is there any way to find out which process (PID) is generating DNS requests on Windows (user computer, win10). I tried some tools from sysinternals (process explorer, tcpview,...) but non on them were ... dns process sysinternals- 1
Can you set Process Monitor to filter multiple file types instead of a single file type? Or all sounds?
I'm trying to figure out which programs are making certain sounds and the only tool that I've come across to have that ability is Syinternals Process Monitor. Filters Unfortunately, it doesn't seem to ... audio system-sounds sysinternals process-monitor file-filter- 1
RUnning psexec as system user returns "access denied"
I am trying to run a program on a remote system, and since I want to peform this action using the shutdown script of my computer, the call to psexec runs as system user. My problem is that I can run ... windows-7 remote-access psexec sysinternals- 1,249
Can I use ProcessExplorer to trace the parameters of future running process?
I would like be able to trace all calls to MSBuild.exe with its parameters. It seems I should be using sysinternals Process Explorer. I'm lost how I can accomplish this or if I should be doing ... windows-10 process sysinternals- 171
How to see the process stack in the Sysinternals Process Explorer from a .net console app?
I am trying to get deeper in the understanding how the OS stacks up the chained function calls. So I created a very simple dotnet console app, see the code below, I call the "Call()" method ... process-explorer sysinternals stack- 171
How to associate RDG files to the RDC Manager shipped with sysinternals when sysinternals comes from the MS Store?
I installed the sysinternals suite from the Windows store. This includes Microsoft Remote Desktop Manager. However, this setup does not create file associations. How to associate RDG files to this app ... file-association sysinternals rdc-manager- 1,870
TCPView (Windows) doesn't show any addresses
I'm using TCPView 4.16 for Windows 10 (downloaded from ). Up until a few days ago it worked fine, but all of a sudden it simply stopped ... windows-10 tcp sysinternals network-traffic traffic-filtering- 1
Psexec64 not working & Error 1231 from 'NET USE \\LOCALHOST\C$'
Whenever I run psexec64 locally, it fails with a "network can't be reached" error. Same goes if I try to use net use, which fails with error 1231. Psexec64.exe -s -i cmd.exe The network ... windows-10 networking shared-folders psexec sysinternals- 1
How can I catch a briefly executing process with SysInternals Process Explorer? (or any standard tool)
For example with SysInternals Process Explorer I can briefly see a process popping up, I even see the window on-screen for half a second, but I can't figure out which tool or method to use to catch it ... windows sysinternals- 159
RamMap empties Standby Lists but doesn't free them
My problem is: when I use RamMap to empty some standby memory, it gets emptied and zeroed, but the freed memory isn't added to the Free memory counter afterwards. Instead, it keeps contributing to the ... windows memory sysinternals- 3
Why windows executables show incorrect compiler timestamps?
I have observed that windows executable files show incorrect timestamps when I view them in PE studio. For example this Notepad.exe file shows a compiler timestamp of 0x86FCBD69 (Mon Oct 07 03:45:05 ... windows compile sysinternals- 113
Sysinternal's VMMap is unable to find injected memory
I'm writing a Python script that uses the Windows API to learn process injection. The injection is successful. I can verify that the shellcode is running, and Process Explorer shows the connection: ... windows virtual-memory sysinternals- 292
Different Imphash for same PE file
I am analyzing a windows executable (C:\Windows\System32\xcopy.exe). The Imphash value calculated with Python is different from the one shown with PE studio. How can Imphash for a same file be ... python malware sysinternals- 113
How to run as admin an .Net exe with PSExec ( doesn't work on some of EXE)
I use PsExec to run some exe with administrators right on a Windows Server 2016. It works. Saddly, i have a .net exe which run not in admin right despite the use of psExec. I think it's due to the exe ... windows psexec sysinternals- 111
15 30 50 per page12345…7 Next
