#MalwareAnalysis is a valuable field & useful for your #cybersecurity career! Want tools & tips!?
🛠️:
PeStudio - www.winitor.com/download
Process Hacker 2 - processhacker.sourceforge.io
Procmon - learn.microsoft.com/en-us/sysint...
CyberChef - gchq.github.io/CyberChef/
DnSpy - github.com/dnSpy/dnSpy
🛠️:
PeStudio - www.winitor.com/download
Process Hacker 2 - processhacker.sourceforge.io
Procmon - learn.microsoft.com/en-us/sysint...
CyberChef - gchq.github.io/CyberChef/
DnSpy - github.com/dnSpy/dnSpy
November 13, 2024 at 7:36 PM
#MalwareAnalysis is a valuable field & useful for your #cybersecurity career! Want tools & tips!?
🛠️:
PeStudio - www.winitor.com/download
Process Hacker 2 - processhacker.sourceforge.io
Procmon - learn.microsoft.com/en-us/sysint...
CyberChef - gchq.github.io/CyberChef/
DnSpy - github.com/dnSpy/dnSpy
🛠️:
PeStudio - www.winitor.com/download
Process Hacker 2 - processhacker.sourceforge.io
Procmon - learn.microsoft.com/en-us/sysint...
CyberChef - gchq.github.io/CyberChef/
DnSpy - github.com/dnSpy/dnSpy
More I forgot to list since they're always default to me:
- #WindowsTerminal
- @ohmyposh.dev
- #PowerShell
- @gitforwindows.org
- #AgentRansack
- @ilspy.bsky.social
- MSBuild Structured Log Viewer
- @sysinternals.com (heavy on the ProcMon)
- @devolutions.net (RDM 🔥🔥)
- #WindowsTerminal
- @ohmyposh.dev
- #PowerShell
- @gitforwindows.org
- #AgentRansack
- @ilspy.bsky.social
- MSBuild Structured Log Viewer
- @sysinternals.com (heavy on the ProcMon)
- @devolutions.net (RDM 🔥🔥)
Things randomly used at any given time in Jeremy's Dev Workflow:
- @vscode.dev
- @visualstudio.bsky.social
- @jetbrains.com #JetBrainsRider
- @github.com
- #AzureDevOps
- #GitHubCopilot
- #LINQPad
- #PowerToys
- #WSL
- #DevHome
- Notepad
- Notepad++
What's yours?
#MVPBuzz
- @vscode.dev
- @visualstudio.bsky.social
- @jetbrains.com #JetBrainsRider
- @github.com
- #AzureDevOps
- #GitHubCopilot
- #LINQPad
- #PowerToys
- #WSL
- #DevHome
- Notepad
- Notepad++
What's yours?
#MVPBuzz
December 29, 2024 at 2:19 PM
More I forgot to list since they're always default to me:
- #WindowsTerminal
- @ohmyposh.dev
- #PowerShell
- @gitforwindows.org
- #AgentRansack
- @ilspy.bsky.social
- MSBuild Structured Log Viewer
- @sysinternals.com (heavy on the ProcMon)
- @devolutions.net (RDM 🔥🔥)
- #WindowsTerminal
- @ohmyposh.dev
- #PowerShell
- @gitforwindows.org
- #AgentRansack
- @ilspy.bsky.social
- MSBuild Structured Log Viewer
- @sysinternals.com (heavy on the ProcMon)
- @devolutions.net (RDM 🔥🔥)
WizTree uses even more delightful magic than multithreading to be as fast as it is. (:
If you're inclined, poke at it with procmon.
If you're inclined, poke at it with procmon.
April 25, 2025 at 5:36 AM
WizTree uses even more delightful magic than multithreading to be as fast as it is. (:
If you're inclined, poke at it with procmon.
If you're inclined, poke at it with procmon.
argh vs code's file i/o is invisible to procmon because my git checkout is on a dev drive. i hate computers
December 4, 2025 at 9:16 PM
argh vs code's file i/o is invisible to procmon because my git checkout is on a dev drive. i hate computers
listent for macOS, ZoomIt, Sysmon, DebugView, NotMyFault, Procmon for Linux, and RAMMap | Sysinternals blog
buff.ly/4mb7E9D
#devtools #windows #linux #utilities #sysinternals #zoomit #procmon
buff.ly/4mb7E9D
#devtools #windows #linux #utilities #sysinternals #zoomit #procmon
listent for macOS, ZoomIt, Sysmon, DebugView, NotMyFault, Procmon for Linux, and RAMMap | Microsoft Community Hub
listent 1.0 for macOS listent is a macOS command-line tool to discover and list code signing entitlements for executable binaries. It supports static...
buff.ly
March 27, 2026 at 4:01 PM
listent for macOS, ZoomIt, Sysmon, DebugView, NotMyFault, Procmon for Linux, and RAMMap | Sysinternals blog
buff.ly/4mb7E9D
#devtools #windows #linux #utilities #sysinternals #zoomit #procmon
buff.ly/4mb7E9D
#devtools #windows #linux #utilities #sysinternals #zoomit #procmon
ohh procmon is like strace if you have a boring job
March 30, 2026 at 8:36 PM
ohh procmon is like strace if you have a boring job
When can we get ProcMon for macOS? We desperately need a tool like this
November 14, 2024 at 3:52 AM
When can we get ProcMon for macOS? We desperately need a tool like this
Who’s watching the procmon logs while you’re gone?
February 3, 2025 at 12:57 AM
Who’s watching the procmon logs while you’re gone?
Wait, does ProcMon not work on Windows on ARM?
August 25, 2026 at 3:08 PM
Wait, does ProcMon not work on Windows on ARM?
We've released Procmon for Linux, Sysmon for Linux, and SysinternalsEBPF with Azure Linux 3.0 support!
Get the tools at sysinternals.com.
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/Sysinte...
Get the tools at sysinternals.com.
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/Sysinte...
Sysinternals - Sysinternals
Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.
sysinternals.com
July 8, 2025 at 9:40 PM
We've released Procmon for Linux, Sysmon for Linux, and SysinternalsEBPF with Azure Linux 3.0 support!
Get the tools at sysinternals.com.
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/Sysinte...
Get the tools at sysinternals.com.
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/Sysinte...
Regarding my idea for Live++ 3, here we go:
Hot-Redirect.
Hook any function in any module to your own impl., hot-reload that as often as you want.
Can all be done on the fly.
And the best: got it working on consoles too, which I believe is a first.
Think DTrace & ProcMon & Hot-Reload on steroids.
Hot-Redirect.
Hook any function in any module to your own impl., hot-reload that as often as you want.
Can all be done on the fly.
And the best: got it working on consoles too, which I believe is a first.
Think DTrace & ProcMon & Hot-Reload on steroids.
July 9, 2025 at 3:42 PM
Regarding my idea for Live++ 3, here we go:
Hot-Redirect.
Hook any function in any module to your own impl., hot-reload that as often as you want.
Can all be done on the fly.
And the best: got it working on consoles too, which I believe is a first.
Think DTrace & ProcMon & Hot-Reload on steroids.
Hot-Redirect.
Hook any function in any module to your own impl., hot-reload that as often as you want.
Can all be done on the fly.
And the best: got it working on consoles too, which I believe is a first.
Think DTrace & ProcMon & Hot-Reload on steroids.
I have Hopper, Ghidra, Binja, IDA Pro, x64Dbg, Wireshark, mitmproxy, Charles, Fiddler, ReClass, DNSpy, GDB, LLDB, Detect it Easy, Procmon, Process Hacker, HxD. I need more tools please recommend some.
April 18, 2025 at 7:36 PM
I have Hopper, Ghidra, Binja, IDA Pro, x64Dbg, Wireshark, mitmproxy, Charles, Fiddler, ReClass, DNSpy, GDB, LLDB, Detect it Easy, Procmon, Process Hacker, HxD. I need more tools please recommend some.
Procmon troubleshooting: http://blog.stealthpuppy.com/virtualisation/the-case-of-the-disappearing-application-during-sequencing/ via @stealthpuppy
November 19, 2024 at 7:32 PM
Procmon troubleshooting: http://blog.stealthpuppy.com/virtualisation/the-case-of-the-disappearing-application-during-sequencing/ via @stealthpuppy
🖥️ “Big Brother is Watching!” by Bartek Bielawski taught how to troubleshoot client machines remotely using #PowerShell without disrupting users:
🧰 #Sysinternals (Handle, Procmon, RAMMap)
📡 #pktmon > netsh
🧪 Smart prep = zero friction
🎟️ psconf.eu
#RemoteSupport #PSConfEU
🧰 #Sysinternals (Handle, Procmon, RAMMap)
📡 #pktmon > netsh
🧪 Smart prep = zero friction
🎟️ psconf.eu
#RemoteSupport #PSConfEU
- YouTube
Enjoy the videos and music you love, upload original content, and share it all with friends, family, and the world on YouTube.
youtu.be
July 22, 2025 at 10:00 AM
🖥️ “Big Brother is Watching!” by Bartek Bielawski taught how to troubleshoot client machines remotely using #PowerShell without disrupting users:
🧰 #Sysinternals (Handle, Procmon, RAMMap)
📡 #pktmon > netsh
🧪 Smart prep = zero friction
🎟️ psconf.eu
#RemoteSupport #PSConfEU
🧰 #Sysinternals (Handle, Procmon, RAMMap)
📡 #pktmon > netsh
🧪 Smart prep = zero friction
🎟️ psconf.eu
#RemoteSupport #PSConfEU
this isn't even a windows vs. linux thing, any sufficiently advanced windows user should be sniffing around their registry, procmon, system files when shit goes sideways. how do I get a $100k job without understanding operating systems
April 27, 2026 at 11:40 AM
this isn't even a windows vs. linux thing, any sufficiently advanced windows user should be sniffing around their registry, procmon, system files when shit goes sideways. how do I get a $100k job without understanding operating systems
Okay! Published my first #PowerShell module on #PSGallery! Being playing with CI / CD and #GithubActions and trying to implement them in my #Github repos!
Find it quite fun, and can easily see the benefits of automated testing and releases!
www.powershellgallery.com/packages/Mar...
Find it quite fun, and can easily see the benefits of automated testing and releases!
www.powershellgallery.com/packages/Mar...
MarksTemple 0.1.1
Builds a Temple in honour of Dark mode in Procmon
www.powershellgallery.com
August 29, 2025 at 11:21 PM
Okay! Published my first #PowerShell module on #PSGallery! Being playing with CI / CD and #GithubActions and trying to implement them in my #Github repos!
Find it quite fun, and can easily see the benefits of automated testing and releases!
www.powershellgallery.com/packages/Mar...
Find it quite fun, and can easily see the benefits of automated testing and releases!
www.powershellgallery.com/packages/Mar...
macOS用プロセスモニタリングツール。イベント検知やセキュリティ監査、マルウェア調査、トラブルシューティングなどに使えるらしい。
GitHub - Brandon7CC/mac-monitor: "The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis.
"The missing ProcMon for macOS": Mac Monitor records Endpoint Security events and displays them for analysis. - Brandon7CC/mac-monitor
github.com
October 5, 2025 at 4:35 AM
macOS用プロセスモニタリングツール。イベント検知やセキュリティ監査、マルウェア調査、トラブルシューティングなどに使えるらしい。
I thought you were going to say Procmon
February 9, 2026 at 4:53 PM
I thought you were going to say Procmon
Update: winget is recursively re-applying ACLs on the *entire manifest cache* every single time it touches it, which triggers close to a *billion* events in ProcMon for a single "winget show" command. Here's the issue with details: github.com/microsoft/wi...
April 20, 2026 at 8:06 PM
Update: winget is recursively re-applying ACLs on the *entire manifest cache* every single time it touches it, which triggers close to a *billion* events in ProcMon for a single "winget show" command. Here's the issue with details: github.com/microsoft/wi...
Ever hear of PortMon or FileMon or ProcMon? I present to you 🥁CatMon
November 11, 2024 at 7:06 PM
Ever hear of PortMon or FileMon or ProcMon? I present to you 🥁CatMon
Launching procmon and it's gone "Not Responding". This doesn't bode well...
March 19, 2025 at 3:04 AM
Launching procmon and it's gone "Not Responding". This doesn't bode well...
If you want to quickly figure out if & where a process is writing a logfile, create a filter (ctrl l) in @SysInternals procmon for your process(es) and also Category = Write & turn off registry & network capture in the toolbar
September 26, 2025 at 1:11 PM
If you want to quickly figure out if & where a process is writing a logfile, create a filter (ctrl l) in @SysInternals procmon for your process(es) and also Category = Write & turn off registry & network capture in the toolbar
📢 New tool: listent for macOS, new features: ZoomIt (panoramic screenshots!), Sysmon, DebugView, and NotMyFault, fixes: Procmon for Linux, RAMMap!
Get the tools at sysinternals.com.
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...
Get the tools at sysinternals.com.
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...
Sysinternals - Sysinternals
Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.
sysinternals.com
March 26, 2026 at 9:07 PM
📢 New tool: listent for macOS, new features: ZoomIt (panoramic screenshots!), Sysmon, DebugView, and NotMyFault, fixes: Procmon for Linux, RAMMap!
Get the tools at sysinternals.com.
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...
Get the tools at sysinternals.com.
See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...