The Sysinternals web site provides you with advanced utilities, technical information, and source code related to Windows 9x, Windows Me, and Windows NT/2000/XP/2K3 internals that you won't find anywhere else. Mark Russinovich and Bryce Cogswell alone write and update everything here. We welcome all suggestions and comments. Before you enter, please read our Licensing terms.

Be sure to check out our current featured utilities:
Process Explorer v8.33, Filemon v6.07, Regmon v6.06, and PsTools v2.0.
 

Come see Mark Russinovich and David Solomon present Windows internals and troubleshooting with Sysinternals tools in London in June!

March 8
Mark to speak at TechEd US and Europe, Windows Connections
Check out Mark's upcoming conference appearances where he'll be presenting Linux kernel/Windows kernel comparisons (that's right, a Linux talk at Microsoft conferences!) and is a featured speaker at TechEd US and Europe and Windows and .NET Magazine Connections. Mark's also giving sessions on using Sysinternals tools and startup and boot troubleshooting.

Process Explorer v8.33
This minor update includes bug fixes and now shows kernel-mode stacks in addition to user mode stacks for user-mode threads.

PsTools v2.0
PsExec, PsShutdown, PsInfo, PsPasswd, and PsGetsid all now take multiple computer names on their command lines and send all non-data output to stderr instead of stdout so that redirection to a file results in cleaner output. PsShutdown also adds options to shutdown at a specific time and to allow an interactive user to cancel a shutdown.

Handle v2.2
In order to better support terminal services Handle now shows the user name of processes owning handles when you search for a instances of an open handle.

February 23
Process Explorer v8.32
Even more improvements to Process Explorer add process commenting, more process information, CPU and memory graph timestamps, performance enhancements, the ability to run in non-admin accounts and more!

The Memory-Optimization Hoax
Read Mark's take on the effectiveness of the ubiquitous so-called "memory optimizers".

January 29
Diskview v2.0
Want to know precisely where a particular file is on disk or what file occupies a cluster? Diskview is an advanced disk analysis tool that visually shows you volume cluster allocation maps.

January 9
PsShutdown v2.21
PsShutdown no longer requires a network connection in order to shutdown the local system.

PsLogList v2.4
PsLogList can now dump event message strings for events that reference multiple event message source files.

Process Explorer v8.20
New usability features in this version of Process Explorer include the ability to open multiple process properties dialogs, resizable process property and thread stack dialogs, system wide memory and CPU graphs (like Windows Task Manager), more process properties performance information, a new process properties tab that shows per-process CPU and virtual memory usage, opacity options, new status bar column choices, a shutdown menu and easier highlighting configuration and new menu organization.

What's New Continued...