Troubleshooting with the Windows Sysinternals tools (Second edition)

Optimize Windows system reliability and performance with Sysinternals IT pros and power users consider the free Windows Sysinternals tools indispensable for diagnosing, troubleshooting, and deeply understanding the Windows platform.

In this extensively updated guide, Sysinternals creator Mark Russinovich and Windows expert Aaron Margosis help you use these powerful tools to optimize any Windows system’s reliability, efficiency, performance, and security.

The authors first explain Sysinternals’ capabilities and help you get started fast.

Next, they offer in-depth coverage of each major tool, from Process Explorer and Process Monitor to Sysinternals’ security and file utilities.

Then, building on this knowledge, they show the tools being used to solve real-world cases involving error messages, hangs, sluggishness, malware infections, and much more. Windows Sysinternals creator Mark Russinovich and Aaron Margosis show you how to: Use Process Explorer to display detailed process and system informationUse Process Monitor to capture low-level system events, and quickly filter the output to narrow down root causesList, categorize, and manage software that starts when you start or sign in to your computer, or when you run Microsoft Office or Internet ExplorerVerify digital signatures of files, of running programs, and of the modules loaded in those programsUse Autoruns, Process Explorer, Sigcheck, and Process Monitor features that can identify and clean malware infestationsInspect permissions on files, keys, services, shares, and other objectsUse Sysmon to monitor security-relevant events across your networkGenerate memory dumps when a process meets specified criteriaExecute processes remotely, and close files that were opened remotelyManage Active Directory objects and trace LDAP API callsCapture detailed data about processors, memory, and clocksTroubleshoot unbootable devices, file-in-use errors, unexplained communication, and many other problemsUnderstand Windows core concepts that aren’t well-documented elsewhere