Site Map

• Sysinternals Home Page
• Utilities
  • File and Disk
    • AccessEnum - View file and directory permissions
    • CacheSet - Tune NT cache parameters
    • Contig - Makes files contiguous
    • DiskExt - Display volume disk-mappings
    • Diskmon - Disk monitor
    • DiskView - Graphical disk sector utility
    • Du - View disk usage by directory
    • EFSDump - View encrypted file information
    • FAT32 for Windows NT 4.0 - Access FAT32 drives from Windows NT 4.0.
    • Filemon - Windows NT/9x File System monitor
    • Fundelete - Extend Recycle Bin to save all deleted files
    • Junction - Create Win2K NTFS symbolic links
    • LDMDump - Examine the internals of the Win2K dynamic disk database
    • NTFSCHK - Chkdsk Win2K NTFS drives from NT 4
    • NTFSDOS - NTFS file system redirector for DOS and Windows 95
    • NTFSDOS Professional - Read-only version of read/write NTFS driver for DOS
    • NTFS for Windows 98 - Read-only version of read/write NTFS driver for Windows 95/98.
    • NTFSInfo - Display NTFS drive information
    • NTFSFlp - NTFS Support for floppy disks
    • NTRecover - Read/write/repair disks on unbootable NT systems
    • PageDefrag - Defragment Paging files and the Registry
    • PsFile - See what files are opened remotely
    • PsTools - Collection of command-line management tools
    • Remote Recover - Copy data from a dead system over a LAN
    • SDelete - Securely delete files and clean free space
    • ShareEnum - View file and print share security settings
    • Sigcheck - View file version and signing information
    • Streams - Reveal NTFS alternate streams
    • Sync - Flush cached data to disk
    • VolumeID - Set Volume ID of FAT or NTFS drives
  • Security
    • AccessEnum - View file and directory permissions
    • Autoruns - See the programs that run at boot time
    • LogonSessions - List active logon sessions
    • NewSID - Generate unique SID for cloned NT machines
    • NT Locksmith - Reset a lost or forgotten administrative password
    • PsLoggedOn - Show users logged on to a system
    • PsTools - Collection of command-line management tools
    • RootkitRevealer - Scan your system for rootkit-based malware
    • SDelete - Securely delete files and clean free space
    • ShareEnum - View file and print share security settings
    • Sigcheck - View file version and signing information
    • Tokenmon - Security-activity monitor
  • Networking
    • AdRestore - Undelete Server 2003 Active Directory objects
    • Hostname - Convert IP address to hostname, and vice versa
    • NTRecover - Read/write/repair disks on unbootable NT systems
    • PsFile - See what files are opened remotely
    • PsTools - Collection of command-line management tools
    • Remote Recover - Copy data from a dead system over a LAN
    • ShareEnum - View file and print share security settings
    • TCPView - Active socket viewer
    • TCPVcon - Active socket command-line viewer.
    • TDIMon - TCP/IP monitor
    • Whois - See who owns an Internet address
  • Processes & Threads
    • Autoruns - See the programs that run at boot time
    • Filemon - Windows NT/9x File System monitor
    • Frob - Quantum Unit Selector
    • Handle - Display file handles open by processes
    • Hostname - Convert IP address to hostname, and vice versa
    • ListDLLs - Display DLLs loaded by processes
    • PMon - Process Monitor
    • Portmon - Windows NT/9x Serial/parallel port monitor
    • Process Explorer - Combines the functionality of Handle and ListDLLs into a GUI
    • PsExec - Execute processes remotely
    • PsKill - Terminate local or remote processes
    • PsList - Show information about processes and threads
    • PsService - View and control services
    • PsSuspend - Suspend and resume processes
    • PsTools - Collection of command-line management tools
    • Regmon - Windows NT/9x Registry monitor
    • Tokenmon - Security-activity monitor
  • System Information
    • Autoruns - See the programs that run at boot time
    • ClockRes - Display the system clock's resolution
    • CPUMon - Pentium-based performance tool
    • Filemon - Windows NT/9x File System monitor
    • Frob - Quantum Unit Selector
    • LiveKd - Use Microsoft kernel debuggers to examine a live system
    • LoadOrder - Show the startup order of drivers and services
    • LogonSessions - List active logon sessions
    • PendMoves - Enumerate pending move/delete operations
    • Process Explorer - Combines the functionality of Handle and ListDLLs into a GUI
    • PsInfo - Obtain information about a system
    • PsTools - Collection of command-line management tools
    • Regmon - Windows NT/9x Registry monitor
    • WinObj - Object Manager Name Space Viewer
  • Miscellaneous
    • AdRestore - Undelete Server 2003 Active Directory objects
    • Autologon - Bypass password screen during logon
    • BgInfo - Set the desktop background to show system information
    • BlueScreen - Sysinternals Blue Screen Screen Saver
    • Ctrl2cap - Caps-lock to Ctrl Mapper for Windows NT
    • DebugView - Windows NT/9x Debug monitor
    • Hex2dec - Convert hex to decimal and vice versa
    • PsTools - Collection of command-line management tools
    • PsLogList - Dump event log records
    • Regjump - Open Regedit to the path you specify.
    • Strings - Search for ANSI and UNICODE strings in binary
• Source Code
  • AccessEnum - View file and directory permissions
  • AdRestore - Undelete Server 2003 Active Directory objects
  • Autologon - Bypass password screen during logon
  • CacheSet - Tune NT cache parameters
  • Ctrl2cap - Caps-lock to Ctrl Mapper for Windows NT
  • Device Object Security - Device object security changer
  • DiskExt - Display volume disk-mappings
  • Formatx and Chkdskx - Programmatically format and chkdsk
  • Fundelete - Extend Recycle Bin to save all deleted files
  • Inside Disk Defragmenting - Inside Windows NT Disk Defragmenting
  • Inside the Disk Key - Inside the Disk Key
  • Junction - Create Win2K NTFS symbolic links
  • NewSID - Generate unique SID for cloned NT machines
  • NTFSInfo - Display NTFS drive information
  • SDelete - Securely delete files and clean free space
  • ShareEnum - View file and print share security settings
  • TCPView - Active socket viewer
  • Tips and Trivia - Miscellaneous info about NT
  • Tokenmon - Security-activity monitor
  • TVCache - Turbo VCACHE
  • VCMon - Windows 95 VCache (disk cache) monitor
  • VxDMon - Windows 95 VxD monitor
• Information
  • Advanced DPCs - Advanced DPC techniques for programmers
  • Books on Windows NT/2K - Links to books, magazines and other web site
  • BOOT.INI Options - Boot INI Options Reference
  • Device Object Security - Kernel-mode security information
  • Inside Disk Defragmenting - Inside Windows NT Disk Defragmenting
  • Inside the Disk Key - Inside the Disk Key
  • Inside High Resolution Timers - Inside Windows NT High Resolution Timers
  • Inisde I/O Completion Ports - Learn about NT completion ports
  • Inside Native API - Information on what's in the Native API
  • Inside Native Applications - Information on native applications
  • Magazines on Windows NT/2K - Links to books, magazines and other web site
  • Monitoring Boot-time Registry Access - Monitoring Registry Activity During the Boot Process
  • NT 4.0 ACL Editors - NT 4.0 system ACL editor dialog interface documentation
  • Our Publications - Articles and papers we've written
  • Speaking Schedule - Mark's conference speaking schedule.
  • Sysinternals at Microsoft - List of Microsoft KB Articles that reference Sysinternals utilities
  • Sysinternals Newsletter - List of past Sysinternals newsletters
  • Tips and Trivia - Miscellaneous info about NT
  • Windows 2000 Quantums - Win2K thread quantum information
  • Windows Internals - The official updates and errata page for the book Windows Internals
  • WinXP Source Tree - Layout of the Windows XP source tree
• What's New - Update history
• Resources - Links to books, magazines and other web site
• Licensing - Sysinternals licensing information
• About Us - Read about the authors of Sysinternals
• Winternals Software - Our retail sister site
• Mark's Blog - Check out Mark's thoughts