Sysinternals

2 answers

Azure pulling wrong MAC address

Hello, I hope I can get some clarification as to how or why this is happening. Here is the "issue" we are currently experiencing. We made changes to our WiFi network to have faculty devices validate connection to our network through their MAC…

asked Mar 30, 2022, 5:35 PM

Natalia Joaquin 31

commented Apr 3, 2025, 12:53 PM

Natalia Joaquin 31

1 answer

PROCMON 4.1.0.0 deletes backing files

I start procmon over powershell. It starts creating output.pml, output-1.pml up to output-22.pml. In the background the file output.pml up to output-5.pml are deleted. I'm not using the ring buffer. If I analyze the backing files entries from the…

asked Mar 27, 2025, 8:55 AM

Bauer Matthias KBL CDYF13 0

answered Mar 31, 2025, 1:09 PM

Bauer Matthias KBL CDYF13 0

1 answer

How to detect the count of P & E cores in Intel CPUs?

Is there a programmatic way to detect the current P & E cores? The Intel® Processor Identification Utility for the Intel® Core™ 12th generation and newer shows the number of the P-Cores and E-Cores in the…

asked Mar 27, 2025, 4:14 AM

yusuf 0

edited an answer Mar 31, 2025, 12:22 AM

kristianp 0

1 answer

Can you please consider to open source all Sysinternals tools ?

Many old versions of Sysinternals tools are no longer available. Parts of Sysinternals tools would be useful to many others applications. Becoming open source will be a major step forward.

asked Mar 29, 2025, 5:02 PM

Olivier Hault (Level IT) 6

commented Mar 30, 2025, 11:09 AM

Marcin Policht 41,375 MVP

0 answers

Procmon: Latest version (4.01) shows wrong Windows version

Tools -> System details shows version of Windows that Procmon is running on. Not the version where trace was captured on. Older Procmon (3.89) shows Windows version correctly.

asked Mar 28, 2025, 8:29 AM

Miro Jakubovsky 0

2 answers

New startup registry key in Windows 10/11, NOT captured within autoruns

Hi All, While researching the startup behavior of Windows Container (Windows Metro) Apps , like the ones installed through Microsoft Store or native to System (xbox/phone, etc), I came across a new registry key location (different from the known…

asked Oct 17, 2022, 7:21 AM

Rahat Sanghoi 6

commented Mar 27, 2025, 6:33 PM

Laurie Aldam 0

1 answer

Auto logon for Win 11

In our manufacturing facility, we have minicomputers used for scan stations (numeric keypad, scan gun, touch screen monitor). We need these to auto login (supply user name and password) silently. This wasn't a problem for Win 10 but we don't see the…

asked Mar 20, 2025, 2:41 PM

Lance James 371

edited the question Mar 24, 2025, 10:32 AM

Lance James 371

2 answers

Crash: Filtering on process that disappears and re-appears.

Process Explorer v16.43 crashes when I am filtering on a process name and processes with that name terminate and then re-start. It happens every time with any process. I use the filter to help debug a multi-process application. When I shut down the…

asked Sep 16, 2021, 5:28 PM

Andrew K 16

answered Mar 21, 2025, 8:30 AM

Daniel 0

3 answers

Sysinternals Procmon Unable to Sort Columns

Can you sort columns in Procmon? Have tried logging in as user and Admin same result Clicked on header column and nothing Moved col to far left and no response.

asked Feb 6, 2024, 11:26 PM

West 20

commented Mar 20, 2025, 4:30 PM

MotoX80 35,626

0 answers

How to Configure Sysmon to Log the Parent Process Hash in Process Creation Events

I am using Sysmon to monitor process creation in my Windows environment. Currently, process creation events (Event ID 1) log detailed information about the parent process, such as the full path (ParentImage) and command line (ParentCommandLine). However,…

asked Mar 20, 2025, 12:19 PM

José Raeiro 0

0 answers

[Bug report] proc list scroll suddenly freezes when scrolling by mouse wheel

When I try to scroll the process list with a mouse wheel, the scroll stops / sticks / freezes at the end of a single wheel move. Look at the screenshot: a hint on yellow background pops up under cursor (cursor is not visible on screenshot,…

asked Jan 8, 2023, 1:18 PM

ka 6

commented Mar 17, 2025, 8:43 AM

mediawolf 0

1 answer

How to fix error in system test ?

Test to see if there are any issues that could prevent your exam from launching. The issues below could prevent exam launch. Please close the following applications and then select the Retest button. • desktopextension How can I close this in my…

asked Dec 15, 2024, 9:13 AM

JAYAMALINI RAVI 20

answered Mar 11, 2025, 5:30 PM

ThotaSaraswati-0926 0

1 answer

BGInfo - Needs Support for Windows Server 2025

The latest version available of BGInfo does not have support for the new Windows Server 2025.

asked Feb 3, 2025, 7:06 PM

ChrisK-4772 10

answered Mar 10, 2025, 9:17 AM

Gareth Cox 0

0 answers

ZoomIt 7.2 to 9.0: The mouse pointer disappears when I try to exit from the "Draw" mode while using "LiveZoom"

The mouse pointer disappears when I try to exit from the the "Draw" mode while using "LiveZoom". By double-clicking the right mouse button, the display exits both the Draw mode and the LiveZoom mode, returning to the normal…

asked Dec 11, 2024, 2:40 PM

Raffaele Mele 10

commented Mar 8, 2025, 8:06 AM

TorQueMoD 0

0 answers

Multiple filters in SysInternals Process Explorer Filter By Name?

I need to filter the Process Explorer list to monitor a couple of processes, but surprisingly the Filter By Name doesn't seem to support a list in any format I've tried, such as "w3wp;iisexpress" "w3wp,iisexpress" "w3wp…

asked Oct 14, 2021, 9:56 AM

Andy Turner 6

commented Mar 7, 2025, 8:56 AM

Nikolaos Katzakis 0

0 answers

procdump64.exe is being flagged for BinSkim Error BA2008, when will this be resolved?

Procdump is a component in a package I'm using and it's being flagged by guardian binskim with error BA2008 for procdump/arm64/procdump64.exe. What is the ETA for when this error will be resolved?

asked Mar 5, 2025, 8:48 PM

Erica Turner-Sumiyoshi 0 Microsoft Employee

1 answer

Software Request for Sysmon 13.34

Hi team, I'm from SCCM support team(Land o Lakes) I'm requesting you to share the link to install Sysmon 13.34 for one of my user , user has requested for this application and Im unable to find the link , Kindly assist ASAP, thanks Regards Mohamed Ashiq

asked Feb 27, 2025, 9:34 PM

G, Mohamedashiq 0

answered Feb 28, 2025, 2:08 AM

Viorel 121K

0 answers

Whois is partially broken

Recently I found that the whois utility in SysinternalsSuite fails to lookup for domains in .tw TLD, giving a message "%ERROR:101: no entries found", while other online whois services e.g. IANA WHOIS (https://www.iana.org/whois) work well to…

asked Feb 26, 2025, 4:52 PM

Junyao Wang 0

0 answers

should pendmoves (and movefile) be updated to comply to the "new" syntax of PendingFileRenameOperations?

It appears that at least in Win10, the PendingFileRenameOperations registry value is now being populated using a slightly different syntax, which prepends "*1" or "*2" to the usual renaming/deleting patterns. Can at least pendmoves be…

asked Feb 25, 2025, 3:20 PM

Nuno Gil 5

edited the question Feb 25, 2025, 3:21 PM

Nuno Gil 5

1 answer

Sysmon unable to handle removal of Alternate data stream

Hi, I'm currently testing sysmon 15.15 with the configuration from (Olaf Hartong) sysmonconfig-with-filedelete.xml and we came across a issue with unblocking downloads (zone.identifier alternate data stream). Is this a problem on how sysmon handles file…

asked Feb 25, 2025, 9:45 AM

Delver, Ivo 0

answered Feb 25, 2025, 9:54 AM

Alex Burlachenko 3,285

AI Skills Fest

Filter

Content

1,214 questions with Sysinternals-related tags

Azure pulling wrong MAC address

PROCMON 4.1.0.0 deletes backing files

How to detect the count of P & E cores in Intel CPUs?

Can you please consider to open source all Sysinternals tools ?

Procmon: Latest version (4.01) shows wrong Windows version

New startup registry key in Windows 10/11, NOT captured within autoruns

Auto logon for Win 11

Crash: Filtering on process that disappears and re-appears.

Sysinternals Procmon Unable to Sort Columns

How to Configure Sysmon to Log the Parent Process Hash in Process Creation Events

[Bug report] proc list scroll suddenly freezes when scrolling by mouse wheel

How to fix error in system test ?

BGInfo - Needs Support for Windows Server 2025

ZoomIt 7.2 to 9.0: The mouse pointer disappears when I try to exit from the "Draw" mode while using "LiveZoom"

Multiple filters in SysInternals Process Explorer Filter By Name?

procdump64.exe is being flagged for BinSkim Error BA2008, when will this be resolved?

Software Request for Sysmon 13.34

Whois is partially broken

should pendmoves (and movefile) be updated to comply to the "new" syntax of PendingFileRenameOperations?

Sysmon unable to handle removal of Alternate data stream