Update: Sysmon v4.12, Autologon v3.1, Sigcheck v2.54, Process Monitor v3.31

Sysmon v4.12 This release of Sysmon, an advanced background monitor that records process-related activity to the event log for use in intrusion detection and forensics, introduces more powerful filtering capabilities, now reports the status of CRL checking and fixes a bug where certain configuration files could cause the driver to blue screen. Sigcheck v2.54 This…


Updates: RAMMap v1.1, ADExplorer v1.4, Autologon v3.0 | Mark’s Talks from TechEd US 2010 are now online

RAMMap v1.1: This update to RAMMap, a memory analysis utility for Windows Vista and Windows 7, adds the ability to purge working sets and memory manager paging lists. This can be useful for measuring the memory usage of applications after they’ve started or when specific features are exercised. ADExplorer v1.40: ADExplorer, an Active Directory editor,…

0