Sysmon v10.0, Autoruns v13.95, VMMap v3.26

  • Article

Sysmon 10.0
This release of Sysmon adds DNS query logging, reports OriginalFileName in process create and load image events, adds ImageName to named pipe events, logs pico process creates and terminates, and fixes several bugs. Autoruns 13.95
This Autoruns update adds support for user Shell folders redirections.   VMMap 3.26
This update to VMMap, a tool for looking at the virtual and physical memory usage of a process, fixes a bug in 64-bit CLR heap reporting.