Sysinternals
The Sysinternals web site was created in 1996 by Mark Russinovich to host his advanced system utilities and technical information. Whether you’re an IT Pro or a developer, you’ll find Sysinternals utilities to help you manage, troubleshoot and diagnose your Windows and Linux systems and applications.
- Read the official guide to the Sysinternals tools, Troubleshooting with the Windows Sysinternals Tools
- Read the Sysinternals Blog for a detailed change feed of tool updates
- Watch Mark's Sysinternals Update videos on YouTube
- Watch Mark’s top-rated Case-of-the-Unexplained troubleshooting presentations and other webcasts
- Read Mark’s Blog which highlight use of the tools to solve real problems
- Check out the Sysinternals Learning Resources page
- Post your questions in the Sysinternals Forum
Sysinternals Live
Sysinternals Live is a service that enables you to run Sysinternals tools directly from the Web without manually downloading them.
Enter a tool's Sysinternals Live path in Windows Explorer as live.sysinternals.com/<toolname> or \\live.sysinternals.com\tools\<toolname>.
In a command prompt use \\live.sysinternals.com\tools\<toolname>.
You can view the entire Sysinternals Live tools directory in a browser or Windows Explorer at https://live.sysinternals.com/.
What's New 
What's New (November 13, 2024)
We’re excited to announce the release of ProcDump 1.0 for Mac, a tool that generates process crash dumps with support for triggers like CPU and memory usage. ProcDump functionality is now available on Windows, Linux, and macOS so that users on all platforms can leverage the same powerful ProcDump capabilities.
What's New (July 23, 2024)
- Process Monitor 2.0 for Linux
Process Monitor for Linux, a convenient and efficient way for developers to trace the syscall activity on the system, is now updated to support a broader range of Linux distributions.
What's New (June 17, 2024)
- Process Monitor v4.0
This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, adds user interface improvements, enhances search, filtering and event counting performance, and introduces a new event column for the process start timestamp.
What's New (February 6, 2024)
ProcDump 3.2 for Linux
This update tracks mmap and munmap syscalls as part of resource leak tracking.ZoomIt v8.0
This update to ZoomIt adds a new feature called DemoType that automates typing.
What's New (January 23, 2024)
- ProcDump 3.1 for Linux
This update to ProcDump for Linux adds trigger support for multiple signals as well as the the -mc switch to control the size of the core dump file by choosing what is included.