SysInternals Suite

jcgriff2

Co-Founder / Admin
BSOD Instructor/Expert
Microsoft MVP (Ret.)
Staff member
Joined
Feb 19, 2012
Posts
21,541
Location
New Jersey Shore
The absolute #1 = SysInternals Suite by Mark Russinovich and Bryce Cogswell - available free from Microsoft TechNet.

~70 stand-alone EXEs - no installation required.


SysInternals Suite - zip file - http://technet.microsoft.com/en-us/sysinternals/bb842062

Live SysInternals - http://live.sysinternals.com/

No home should be without them!

My favorites -
- AutoRuns
- Load Order
- Process Explorer
- Process Monitor

The last two can be configured with Windbg symbol files using local cache or the MSDL SYM site -
Code:
[FONT=Lucida Console][PLAIN]SRV*c:\symbols*http://msdl.microsoft.com/download/symbols
[/PLAIN][/FONT]

Regards. . .

John
 
Last edited:
The Sysinternal tools are excellent stuff and I don't think I've used half of them. Best of all, you can run them off a flash drive. No installation needed.

Fantastic idea for a sub forum, BTW!
 
I have been using bits of these since before Mark was at MS. Absolute life savers.
 
Its not a difficult read but there is a lot to absorb. Have it in pdf as well. Seems easier to flip between reading and WinDbg than reading the softcover.

I wonder how much is different between 5 and 6?
 
I've just started reading the 6th Edition. It's significantly different from the 5th Edition, but nowhere near the difference between the 4th and 5th Editions (XP to Vista).

I'm a bit disappointed with it tho', they refer to the other, unpublished chapters and you can't go and look things up there.
 
Part 1 contains up to Chapter 7 - but the contents shows through Chapter 14.
When I saw the reference to Crash Dump Analysis (Chapter 14) I immediately flipped to the back of the book looking for it.
Imagine my disappointment when I remembered that I only owned "Part 1"!
 
Yah, usasma, that seems to be problematic when you can't even access the 2nd half yet!

The reason 4th edition was so radically different to the 5th is because Vista internals are completely altered compared to XP. An entirely new OS structure is going to give good cause for a vastly changed book to reference it. Windows 7 does have its own set of changes, but they're more like improvements or fixes to structural blunders they made in Vista and is therefore not much different as a result.

I've contemplated on getting it, but I believe I can hold off til part 2 pops up, since part 2 covers very important items in OS structure (like the I/O system). However, I don't believe any of it has anything that hasn't changed from what's covered in 5th Edition. The changes Windows 7 made from Vista are primarily on thread scheduling and object handling, which are covered in Part 1 of 6th edition of the book.
 
Back
Top