Skip to main content

Home Sysinternals


(also Windows Sysinternals)

Sysinternals definition

Sysinternals is a set of advanced system utilities and tools developed by Microsoft. It provides comprehensive insights into the internal workings of the Windows operating system.

Sysinternals utilities assist in troubleshooting, diagnostics, performance monitoring, and system optimization, empowering users with deep visibility and control over their Windows-based systems.

See also: Sysmon

Sysinternals tools

The Sysinternals suite comprises a variety of powerful tools developed by Microsoft. These tools include:

  • Process Explorer. It provides detailed insights into running processes, their dependencies, and resource usage.
  • Autoruns. It allows users to manage startup applications and processes, offering visibility into programs that automatically initiate when the system boots.
  • Process Monitor observes real-time system activities, such as file system operations, registry changes, and network connections. This monitoring facilitates issue diagnosis.
  • Disk Usage (DU) presents graphical representations of disk space utilization for directories and files, aiding in disk cleanup and optimization.
  • ZoomIt. It’s a screen zoom and annotation tool that facilitates presentations, training, and demonstrations by allowing users to zoom in on-screen content and draw annotations.
  • Sigcheck verifies the digital signatures of files, helping to identify potentially malicious or tampered files on a system.
  • TCPView. It displays active network connections, including details on local and remote IP addresses, ports, and protocols. TCPView aids in troubleshooting network-related problems.