Aktualisierung der Windows Sysinternals Suite (16.5.2017)

Noch ein kleiner Tipp: Die von Microsoft kostenlos bereitgestellte Windows Sysinternals Suite wurde gestern teilweise aktualisiert.

Mark Russinovich hat die Details im Technet-Blog offen gelegt. Hier die Liste der aktualisierten Module.

• ProcDump v9: This major update to ProcDump, a utility that enables process dump capture based on a variety of triggers, introduces the ability to take capture multiple dumps sizes. This is particularly useful when capturing crash dumps of applications susceptible to termination due to unresponsiveness (e.g. IIS Ping killing w3wp.exe). This release also adds support for an associated Kernel Dump of the process that includes the kernel stacks of the process.
• Autoruns v13.71: This update to Autoruns, a comprehensive autostart execution point manager, adds Microsoft HTML Application Host (mshta.exe) as hosting image so it displays the hosted image details, and now doesn’t apply filters to hosting images.
• BgInfo v4.22: This release of Bginfo honors applocker policy for VB scripts specified as the source of field data.
• LiveKd v5.62: This update to Livekd is signed with a certificate installed in the Win7 RTM trusted roots store.
• Process Monitor v3.33: Procmon v3.33 includes bug fixes for destructive event filtering and is signed with certificate installed in the Win7 trusted roots store.
• Process Explorer v16.21: This Process Explorer release includes a fix for an intermittent bug in the Virus Total scanning logic, and is signed with Win7 RTM-compatible certificate.

Einige Module wurden lediglich mit einem Zertifikat signiert, bei anderen wurden Bugs behoben. (via)