{"id":458314,"date":"2017-02-20T12:20:00","date_gmt":"2017-02-20T08:20:00","guid":{"rendered":"http:\/\/nhub.news\/?p=458314"},"modified":"2017-02-20T18:33:56","modified_gmt":"2017-02-20T16:33:56","slug":"sysinternals-updates-autoruns-process-explorer-process-monitor-more","status":"publish","type":"post","link":"http:\/\/nhub.news\/fr\/2017\/02\/sysinternals-updates-autoruns-process-explorer-process-monitor-more\/","title":{"rendered":"Sysinternals updates Autoruns, Process Explorer, Process Monitor, more"},"content":{"rendered":"

Following yesterday\u2019s Sysmon 6 release, Microsoft Sysinternals has announced new releases of Autoruns, Process Explorer, Process Monitor, AccessChk, LiveKD and BgInfo. Following yesterday\u2019s Sysmon 6 release, Microsoft Sysinternals has announced new releases of Autoruns, Process Explorer, Process Monitor, AccessChk, LiveKD and BgInfo. Autoruns now lists print moni\u2026<\/b>
Following yesterday\u2019s Sysmon 6 release, Microsoft Sysinternals has announced new releases of Autoruns , Process Explorer , Process Monitor , AccessChk , LiveKD and BgInfo.
Autoruns now lists print monitors, the DLLs responsible for sending data from the Windows print spooler to the kernel mode print driver. We tried this on a Windows 10 laptop and found 10 installed monitors, mostly relating to PDF and other virtual printers.
Unfortunately, Autoruns listed every monitor DLL as a \u00ab\u00a0file not found\u00a0\u00bb, even for standard Windows files which definitely existed, and were stored in the usual locations. This could be a bug: if you see the same thing, don\u2019t delete a print monitor entry until you\u2019ve confirmed that you don\u2019t need it, and the DLL doesn\u2019t exist.
Autoruns 13.70 also extends its WMI support, apparently listing registrations in the WMI\\Default namespace. This showed up as blank on our test PC, but we\u2019ll take their word for it for now.
AccessCheck 6.1 has extended its Windows 10 abilities with reports on the new process trust access control entries and token security attributes.
Process Monitor has a new option to display process and thread IDs in hexadecimal format, which is a feature we never realized we needed.
More usefully, Process Monitor, Process Explorer and LiveKD have been updated to comply with the new driver signing policy in recent releases of Windows 10.
Autoruns, Process Monitor and Process Explorer have enhanced high DPI support on their toolbars, and some important bugs have been fixed, including one that might have stopped BgInfo working at all.
Autoruns , Process Explorer , Process Monitor , AccessChk , LiveKD and BgInfo are available now for Windows 7 and later.<\/p>\n

\u00a9 Source: http:\/\/feeds.betanews.com\/~r\/bn\/~3\/o-3nox5eViQ\/<\/a>
\nAll rights are reserved and belongs to a source media.<\/span><\/p>\n