Daniel Roberson
  • Posts
  • About
  • Notes
  • Projects
  • Time
  • Posts
    About
    Notes
    Projects
    Time

Sysinternals Suite

0001-01-01 windows

The Sysinternals Suite is a set of tools used for troubleshooting Windows systems.

Some tools provided by Sysinternals include: AccessChk, Handle, PsExec, Strings, Sysmon, ProcDump, and many more.

https://learn.microsoft.com/en-us/sysinternals/downloads/sysinternals-suite


Links to this note

  • credentialtheftprocdumpcomsvcs-manageengine2024
  • incidentresponse-luttgens2014
  • evadingedr-hand2024
  • Autoruns
  • borges2021
  • strings command
  • handle.exe
  • ProcDump
  • Process Explorer
  • strings.exe
  • sysmon

Relevant Topics

Program Database

2024-08-05 pe windows

Dynamic Link Library

0001-01-01 pe windows

LoadLibrary

0001-01-01 winapi windows

PEBear

0001-01-01 malwareanalysis reversing pe windows

Portable Executable

0001-01-01 pe windows


Recent Posts

Linux Persistence: Modular Software

2025-04-17 DFIR CTF persistence linux persistence apache asterisk

Linux Persistence: Web Shells

2025-04-16 DFIR persistence webshell linux persistence webshell apache nginx PHP

Linux Persistence: Rootkits

2025-04-15 DFIR persistence rootkit LKM linux persistence LKM rootkit LD_PRELOAD kprobe ftrace ld.so hooking

Linux Persistence: Processes

2025-04-11 DFIR persistence processes linux persistence processes

Defanging Linux LKM Rootkits With cleanup_module()

2025-04-05 Linux LKM rootkits EDR hooks incident response Linux LKM rootkit


Home

About

Notes

Projects

Time

© All rights reserved. Powered by Hugo and Erblog.