Quick Tip -Sysinternals-



I been slacking on this blogging thing.  Anyway I wanted to show a quick tip that I want to build off going forward with more posts.

Sysinternals is a great free tool that can help you with numerous computer issues.

https://docs.microsoft.com/en-us/sysinternals/

Another cool thing is Sysinternals Live, basically a website that hosts all the Sysinternals Tools.

https://live.sysinternals.com/



The really cool feature I wanted to go over, is mounting this website as a local drive, or calling these tools straight from the command line.

P$> \\live.sysinternals.com\tools\procmon.exe

 This command will fire up procmon.exe. (I got a post coming up for procmon)


Syntax= \\live.sysinternals.com\tools\TOOL.EXE

It may take a moment but all the Sysinternals tools are available to you, over the wire.  Pretty neat.  Another way to demonstrate this is by mapping that entire web directory to a location on your computer.


Click "This PC" > "Computer" > "Map Network Drive"
You can also right click in the empty space and select "Add Network Location"
Click "Next"

Enter the network address https://live.sysinternals.com/, Click "Next", and you should now have a folder containing all the Sysinternals tools mapped to your computer, ready for your use.


Sysinternals contains very powerful applications that can help you track down and solve most computer issues.  I wanted to use this as an intro to more advanced topics with these Sysinternals tools.

More posts to come.  (Hopefully)


Comments

Post a Comment

Popular posts from this blog

Checking your OS (Windows10)

Image
Hello again, Wanted to make another post to make sure you have the tools to keep your computer and your digital self, secure. This post will cover Windows 10; how to check which version you have, how to update, and finally how to make sure you have proper security settings. Click on Start > Settings > System > About Marked in red are the most important parts.  Up top it will tell us if certain security features are "On/Off".  You want to see those green checks.  The second part tells you whether you are running a 32bit or 64bit processor.  (Most likely 64bit)  The bottom part will tell you the Windows specifics.  In this case we are looking for "Version 1709".  Keeping your system up-to-date will ensure you have the latest defenses against the newest attacks. Now if you don't see this version lets try and run Windows Update to get you there. Click on Start > Settings > Update & Security Click on "Check for Updat...
Read more

How I use Sysinternals

Image
Hey, In my previous post I demonstrated how to add the Sysinternals tools to your computer from  https://live.sysinternals.com/ .  "Neat, now what?"  This is not a comprehensive guide to Sysinternals merely how I use these tools to increase my cyber safety. If you browsed to  https://live.sysinternals.com  you'll notice there is numerous tools.  I just want to quickly show a few of the tools I have found most useful and how I use them. 1.) Sigcheck  - " Sigcheck is a command-line utility that shows file version number, timestamp information, and digital signature details, including certificate chains." You can run it via: PS C:\Users\Matt> \\live.sysinternals.com\tools\sigcheck.exe -h -v "C:\Users\Matt\Downloads\pro cesshacker-3.0.1424-setup.exe" >> sigchecktest.txt This command is run against a "file", usually something you just downloaded/received.  You are unsure about it's safety.  You can run "Sigcheck...
Read more