Jump to content

Sysinternals: Difference between revisions

From Wikipedia, the free encyclopedia
Browse history interactively
← Previous edit
Content deleted Content added
VisualWikitext
removed inappropriate tone flag
GreenC bot (talk | contribs)
Bots
2,516,563 edits
 
(26 intermediate revisions by 17 users not shown)
Line 1: Line 1:
{{short description|Microsoft website offering diagnostic tools for Windows}}
{{Infobox company
{{Infobox company
| name = Winternals Software LP
| name = Winternals Software LP
Line 5: Line 6:
| type =
| type =
| genre = [[Software development]]
| genre = [[Software development]]
| foundation = 1996
| foundation = {{Start date and age|1996}}
| founder = Bryce Cogswell and [[Mark Russinovich]]
| founder = Bryce Cogswell and [[Mark Russinovich]]
| location_city = [[Austin, Texas]]
| location_city = [[Austin, Texas]]
Line 25: Line 26:
| subsid =
| subsid =
| slogan =
| slogan =
| homepage = [https://technet.microsoft.com/en-us/sysinternals/default www.sysinternals.com]
| homepage = [https://docs.microsoft.com/en-us/sysinternals/ www.sysinternals.com]
| footnotes =
| footnotes =
| intl =
| intl =
}}
}}


'''Windows Sysinternals''' is a part of the [[Microsoft TechNet]] [[website]] which offers technical resources and utilities to manage, diagnose, troubleshoot, and monitor a [[Microsoft Windows]] environment.<ref name="technet-sysinternals">{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/default.aspx|title=Windows Sysinternals|date={{Date|August 12, 2009|mdy}}|work=Microsoft Technet|publisher=Microsoft Corporation|accessdate={{Date|2009-08-15|mdy}}}}</ref> Originally, the Sysinternals website (formerly known as '''ntinternals'''<ref name=PDMR>{{Cite video |people=[[Mark Russinovich]] |title=Podnutz Episode #64 - Mark Russinovich Talks Tech |url=http://www.podnutz.com/podnutz064 |format=Flash |medium=Podcast |publisher=Podnutz |time=0:02:01 |quote=...that's when Sysinternals started, originally called ntinternals... |date=May 9, 2011 |accessdate=June 18, 2011}}</ref>) was created in 1996 and was operated by the company '''Winternals Software LP''',<ref name="technet-sysinternals" /> which was located in [[Austin, Texas]]. It was started by [[software developer]]s Bryce Cogswell and [[Mark Russinovich]].<ref name="technet-sysinternals" /> [[Microsoft]] acquired Winternals and its assets on July 18, 2006.<ref>{{Cite web|url=http://www.winternals.com/Company/PressRelease92.aspx
'''Windows Sysinternals''' is a [[website]] that offers technical resources and utilities to manage, diagnose, troubleshoot, and monitor a [[Microsoft Windows]] environment.<ref name="docs-sysinternals">{{Cite web|url=https://docs.microsoft.com/en-us/sysinternals/|title=Windows Sysinternals|date=August 12, 2009|work=Microsoft Docs|publisher=Microsoft Corporation|access-date=August 15, 2009}}</ref> Originally, the Sysinternals website (formerly known as '''ntinternals'''<ref name=PDMR>{{Cite video |people=[[Mark Russinovich]] |title=Podnutz Episode #64 - Mark Russinovich Talks Tech |url=http://www.podnutz.com/podnutz064 |format=Flash |medium=Podcast |publisher=Podnutz |time=0:02:01 |quote=...that's when Sysinternals started, originally called ntinternals... |date=May 9, 2011 |access-date=June 18, 2011}}</ref>) was created in 1996 and was operated by the company '''Winternals Software LP''',<ref name="docs-sysinternals" /> which was located in [[Austin, Texas]]. It was started by [[software developer]]s Bryce Cogswell and [[Mark Russinovich]].<ref name="docs-sysinternals" /> [[Microsoft]] acquired Winternals and its assets on July 18, 2006.<ref>{{Cite web|url=http://www.winternals.com/Company/PressRelease92.aspx
|archive-url=https://web.archive.org/web/20070314051129/http://www.winternals.com/Company/PressRelease92.aspx
⚫
|title=Microsoft Acquires Winternals Software |date=July 18, 2006 |accessdate=July 18, 2006 |work=Company Press Releases |publisher=Winternals Software }}</ref>
|url-status=dead
|archive-date=March 14, 2007
⚫
|title=Microsoft Acquires Winternals Software |date=July 18, 2006 |access-date=March 14, 2007|work=Company Press Releases |publisher=Winternals Software }}</ref>


The website featured several [[freeware]] tools to administer and monitor computers running Microsoft Windows. The software can now be found at Microsoft. The company also sold [[data recovery]] utilities and professional editions of their freeware tools.
The website featured several [[freeware]] tools to administer and monitor computers running Microsoft Windows. The software can now be found at Microsoft. The company also sold [[data recovery]] utilities and professional editions of their freeware tools.


==Winternals Software LP==
==Winternals Software LP==
Winternals Software LP was founded by Bryce Cogswell and Mark Russinovich, who sparked the [[2005 Sony BMG CD copy protection scandal]] in an October 2005 posting to the Sysinternals blog.<ref>{{Cite web| url=http://blogs.technet.com/markrussinovich/archive/2005/10/31/sony-rootkits-and-digital-rights-management-gone-too-far.aspx | title=Sony, Rootkits and Digital Rights Management Gone Too Far | author=Mark Russinovich | date=October 31, 2005 | work=Sysinternals Blog | accessdate=December 18, 2006 }}</ref>
Winternals Software LP was founded by Bryce Cogswell and Mark Russinovich, who sparked the [[Sony BMG copy protection rootkit scandal|2005 Sony BMG CD copy protection scandal]] in an October 2005 posting to the Sysinternals blog.<ref>{{Cite web| url=http://blogs.technet.com/markrussinovich/archive/2005/10/31/sony-rootkits-and-digital-rights-management-gone-too-far.aspx | title=Sony, Rootkits and Digital Rights Management Gone Too Far | author=Mark Russinovich | date=October 31, 2005 | work=Sysinternals Blog | access-date=December 18, 2006 }}</ref>


On July 18, 2006, Microsoft Corporation acquired the company and its assets. Russinovich explained that Sysinternals will remain active until Microsoft agrees on a method of distributing the tools provided there.<ref>{{Cite web| url=http://blogs.technet.com/markrussinovich/archive/2006/07/18/on-my-way-to-microsoft.aspx | title=On My Way to Microsoft! | author=Mark Russinovich | date=July 18, 2006 | work=Sysinternals Blog | accessdate=December 18, 2006 }}</ref> However, NT Locksmith, a Windows [[password recovery]] utility, was immediately removed.{{Citation needed|date=August 2009}} Currently, the Sysinternals website is moved to the ''Windows Sysinternals'' website and is a part of Microsoft TechNet.<ref name="technet-sysinternals" />
On July 18, 2006, Microsoft Corporation acquired the company and its assets. Russinovich explained that Sysinternals will remain active until Microsoft agrees on a method of distributing the tools provided there.<ref>{{Cite web| url=http://blogs.technet.com/markrussinovich/archive/2006/07/18/on-my-way-to-microsoft.aspx | title=On My Way to Microsoft! | author=Mark Russinovich | date=July 18, 2006 | work=Sysinternals Blog | access-date=December 18, 2006 }}</ref> However, NT Locksmith, a Windows [[password recovery]] utility, was immediately removed.{{Citation needed|date=August 2009}} Most of the source that Sysinternals provided was also removed. Currently, the Sysinternals website is moved to the ''Windows Sysinternals'' website and is a part of Microsoft Docs.<ref name="docs-sysinternals" />


In late 2010, Bryce Cogswell retired from Sysinternals.<ref>"[http://www.windowsitpro.com/article/windows-azure-platform2/mark-russinovich-discusses-windows-azure-129988 Mark Russinovich Discusses Windows Azure]", Windows IT Pro. Retrieved on April 16, 2011.</ref>
In late 2010, Bryce Cogswell retired from Sysinternals.<ref>"[http://www.windowsitpro.com/article/windows-azure-platform2/mark-russinovich-discusses-windows-azure-129988 Mark Russinovich Discusses Windows Azure]", Windows IT Pro. Retrieved on April 16, 2011.</ref>

===Source code and technology===
{{Refimprove section|date=August 2009}}
Most of the utilities that were developed were usually accompanied with the source code written in [[C (programming language)|C]], [[C++]], or [[assembly language]]. The code was compatible with Visual C++ v. 6.0 and could be compiled with little effort by a Windows developer. Some utilities did not come with source code, or a lesser version would be available with the source. In later releases, there were 64-bit versions of the utilities and even Linux versions as well.{{Citation needed|date=September 2010}}

However, since the Microsoft acquisition, none of the utilities currently available are accompanied by source code, and the Linux versions are no longer maintained or available.

Some of the coding tricks used were based on the [[Native API|Windows Native API (NTAPI)]], which was (and still is) mostly undocumented by Microsoft. Using these coding examples - with source - would enable developers to create extraordinary programs that performed operations that would otherwise have been impossible using a standard API. Examples include hiding Registry information, intercepting or hooking APIs to monitor file operations by the OS, as well as Registry operations.


==Products==
==Products==
Windows Sysinternals supplies users with numerous free utilities, most of which are being actively developed by Mark Russinovich and Bryce Cogswell,<ref name="technet-sysinternals-w">{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/default.aspx|title=What is new (August 5, 2009)|date={{Date|August 15, 2009|mdy}}|work=Windows Sysinternals|publisher=Microsoft Corporation|accessdate={{Date|2009-08-15|mdy}}}}</ref> such as [[Process Explorer]], an advanced version of Windows Task Manager,<ref>{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx|title=Process Explorer v11.33|date={{Date|February 4, 2009|mdy}}|work=Windows Sysinternals|publisher=Microsoft Corporation|accessdate={{Date|2009-08-15|mdy}}}}</ref> Autoruns, which Windows Sysinternals claims is the most advanced manager of startup applications,<ref>{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/bb963902.aspx|title=Autoruns for Windows v9.53|date={{Date|August 12, 2009|mdy}}|work=Windows Sysinternals|publisher=Microsoft Corporation|accessdate={{Date|2009-08-15|mdy}}}}</ref> [[RootkitRevealer]], a [[rootkit]] detection utility,<ref>{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/bb897445.aspx|title=RootkitRevealer v1.71|date={{Date|November 1, 2006|mdy}}|work=Windows Sysinternals|publisher=Microsoft Corporation|accessdate={{Date|2009-08-15|mdy}}}}</ref> [[Contig (defragmentation utility)|Contig]], [[PageDefrag]] and a total of 65 other utilities.<ref name="technet-sysinternals-index">{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/bb545027.aspx|title=Sysinternals Utilities Index|date={{Date|August 12, 2009|mdy}}|work=Windows Sysinternals|publisher=Microsoft Corporation|accessdate={{Date|2009-08-15|mdy}}}}</ref> [[NTFSDOS]], which allowed NTFS volumes to be read by Microsoft's [[MS-DOS]] operating system, is now discontinued and is no longer available for download.<ref name="technet-sysinternals-index" /> A larger number of these utilities are nowadays bundled by the publishers for the sake of simpler downloading of all, or most, current versions in the so-called Sysinternals Suite.
Windows Sysinternals supplies users with numerous free utilities, most of which are being actively developed by Mark Russinovich and Bryce Cogswell,<ref name="technet-sysinternals-w">{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/default.aspx|title=What is new (August 5, 2009)|date=August 15, 2009|work=Windows Sysinternals|publisher=Microsoft Corporation|access-date=August 15, 2009}}</ref> such as [[Process Explorer]], an advanced version of [[Windows Task Manager]],<ref>{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/bb896653.aspx|title=Process Explorer v11.33|date=February 4, 2009|work=Windows Sysinternals|publisher=Microsoft Corporation|access-date=August 15, 2009}}</ref> Autoruns, which Windows Sysinternals claims is the most advanced manager of startup applications,<ref>{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/bb963902.aspx|title=Autoruns for Windows v9.53|date=August 12, 2009|work=Windows Sysinternals|publisher=Microsoft Corporation|access-date=August 15, 2009}}</ref> [[RootkitRevealer]], a [[rootkit]] detection utility,<ref>{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/bb897445.aspx|title=RootkitRevealer v1.71|date=November 1, 2006|work=Windows Sysinternals|publisher=Microsoft Corporation|access-date=August 15, 2009}}</ref> [[Contig (defragmentation utility)|Contig]], [[PageDefrag]] and a total of 65 other utilities.<ref name="technet-sysinternals-index">{{Cite web|url=https://technet.microsoft.com/en-us/sysinternals/bb545027.aspx|title=Sysinternals Utilities Index|date=August 12, 2009|work=Windows Sysinternals|publisher=Microsoft Corporation|access-date=August 15, 2009}}</ref> [[NTFSDOS]], which allowed NTFS volumes to be read by Microsoft's [[MS-DOS]] operating system, is now discontinued and is no longer available for download.<ref name="technet-sysinternals-index" /> A larger number of these utilities are nowadays bundled by the publishers for the sake of simpler downloading of all, or most, current versions in the so-called Sysinternals Suite.


Previously available for download was the '''Winternals Administrator Pak''' which contained ERD Commander 2005, Remote Recover 3.0, NTFSDOS Professional 5.0, Crash Analyzer Wizard, FileRestore 1.0, Filemon Enterprise Edition 2.0, Regmon Enterprise Edition 2.0, AD Explorer Insight for Active Directory 2.0, and TCP Tools.
Previously available for download was the '''Winternals Administrator Pak''' which contained ERD Commander 2005, Remote Recover 3.0, NTFSDOS Professional 5.0, Crash Analyzer Wizard, FileRestore 1.0, Filemon Enterprise Edition 2.0, Regmon Enterprise Edition 2.0, AD Explorer Insight for Active Directory 2.0, and TCP Tools.


On May 18, 2010 Sysinternals released its first new utility since its acquisition by Microsoft. Named RAMMap, it is a diagnostic utility similar to the memory tab of Windows Resource monitor, but more advanced. RAMMap runs only on Windows Vista and later.<ref>{{Cite web|title=RAMMap v1.11|url=https://technet.microsoft.com/en-us/sysinternals/ff700229.aspx|first1=Mark|last1=Russinovich|first2=Bryce|last2=Cogswell|publisher=Microsoft|work=Windows Sysinternals|date=May 18, 2011|accessdate=June 12, 2011}}</ref>
On May 18, 2010, Sysinternals released its first new utility since its acquisition by Microsoft. Named RAMMap, it is a diagnostic utility similar to the memory tab of Windows Resource monitor, but more advanced. RAMMap runs only on Windows Vista and later.<ref>{{Cite web|title=RAMMap v1.11|url=https://technet.microsoft.com/en-us/sysinternals/ff700229.aspx|first1=Mark|last1=Russinovich|first2=Bryce|last2=Cogswell|publisher=Microsoft|work=Windows Sysinternals|date=May 18, 2011|access-date=June 12, 2011}}</ref> A system event monitoring tool, Sysmon, was released in 2014, which can collect and publish system events that are helpful for security analysis into the Windows Event Log.<ref>{{Cite web|title=Sysmon v10.2|url=https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon|first1=Mark|last1=Russinovich|first2=Thomas|last2=Garnier|publisher=Microsoft Corporation|work=Windows Sysinternals|date=June 28, 2019|access-date=July 24, 2019}}</ref><ref>{{Cite web|title=Defrag Tools #108 - Sysinternals SysMon - Mark Russinovich|url=https://channel9.msdn.com/Shows/Defrag-Tools/Defrag-Tools-108-Sysinternals-SysMon-Mark-Russinovich|first1=Mark|last1=Russinovich|first2=Andrew|last2=Richards|first3=Thomas|last3=Garnier|publisher=Microsoft Corporation|work=Windows Sysinternals|date=September 29, 2014|access-date=July 24, 2019}}</ref>

In November 2018, Microsoft confirmed it is [[porting]] Sysinternals tools, including [[ProcDump]] and [[Process Monitor|ProcMon]], to [[Linux]].<ref>{{cite web|url=https://www.zdnet.com/article/microsoft-working-on-porting-sysinternals-to-linux/|title=Microsoft working on porting Sysinternals to Linux|last=Cimpanu|first=Catalin|date=5 November 2018|website=[[ZDNet]]|publisher=[[CBS Interactive]]|access-date=5 November 2018}}</ref>


==Licensing issue with Best Buy==
==Licensing issue with Best Buy==
In April 2006, [[Geek Squad]], a tech support company working in cooperation with [[Best Buy]], was accused of using unlicensed versions of the [[Emergency Repair Disk Commander|ERD Commander]] software. Winternals supplied Best Buy with copies of its software so that Best Buy could evaluate the software while conducting contract negotiations for using it on a permanent basis. When contract talks broke down Best Buy did not notify its Geek Squad Agents to stop using the software and discard all copies. A judge granted a restraining order on April 14, requiring that use of all unlicensed software be stopped, and forcing Best Buy to turn over all copies of Winternals software within 20 days.<ref>"[http://www.foxnews.com/story/0,2933,191593,00.html Best Buy's Geek Squad Accused of Pirating Software]", FOX News. Retrieved on December 16, 2006.</ref> After settlement, a version of the Winternals software was released to be used by Geek Squad.<ref>"[http://www.winternals.com/Company/PressRelease90.aspx Winternals & Best Buy/Geek Squad Settle Federal Lawsuit]", Winternals press release. Retrieved on December 16, 2006. {{webarchive |url=https://web.archive.org/web/20070314004405/http://www.winternals.com/Company/PressRelease90.aspx |date=March 14, 2007 }}</ref>
In April 2006, [[Geek Squad]], a tech support company working in cooperation with [[Best Buy]], was accused of using unlicensed versions of the [[Emergency Repair Disk Commander|ERD Commander]] software. Winternals supplied Best Buy with copies of its software so that Best Buy could evaluate the software while conducting contract negotiations for using it on a permanent basis. When contract talks broke down Best Buy did not notify its Geek Squad Agents to stop using the software and discard all copies. A judge granted a restraining order on April 14, requiring that use of all unlicensed software be stopped, and forcing Best Buy to turn over all copies of Winternals software within 20 days.<ref>"[https://www.foxnews.com/story/best-buys-geek-squad-accused-of-pirating-software Best Buy's Geek Squad Accused of Pirating Software]", FOX News. Retrieved on December 16, 2006.</ref> After settlement, a version of the Winternals software was released to be used by Geek Squad.<ref>"[http://www.winternals.com/Company/PressRelease90.aspx Winternals & Best Buy/Geek Squad Settle Federal Lawsuit]", Winternals press release. Retrieved on December 16, 2006. {{webarchive |url=https://web.archive.org/web/20070314004405/http://www.winternals.com/Company/PressRelease90.aspx |date=March 14, 2007 }}</ref>


==See also==
==See also==
Line 67: Line 65:


==External links==
==External links==
* [http://www.sysinternals.com/ Sysinternals page on Microsoft TechNet]
* [http://www.sysinternals.com/ Sysinternals page on Microsoft Docs]
** [http://live.sysinternals.com/ Sysinternals Live tools directory] – Directly accessible repository of utilities
** [http://live.sysinternals.com/ Sysinternals Live tools directory] – Directly accessible repository of utilities
* [http://www.winternals.com/ Winternals homepage] – Redirected to Microsoft Winternals announcement page
* [http://www.winternals.com/ Winternals homepage]– Redirected to Microsoft [[Bing (search engine)|Bing]] search for "winternals"
** [https://web.archive.org/web/*/www.winternals.com Web Archive.org link to historical information Winternals]
** {{Webarchive|url=https://web.archive.org/web/20060209015734/http://www.winternals.com/ |date=February 9, 2006 }}
* https://www.nirsoft.net/ collection of freeware utilities


{{Microsoft}}
{{Microsoft}}
Line 82: Line 79:
[[Category:Microsoft subsidiaries]]
[[Category:Microsoft subsidiaries]]
[[Category:Technology companies established in 1996]]
[[Category:Technology companies established in 1996]]
[[Category:Defunct software companies of the United States]]
[[Category:Microsoft free software]]

Latest revision as of 20:10, 30 September 2024

Winternals Software LP
GenreSoftware development
Founded1996; 28 years ago (1996)
FounderBryce Cogswell and Mark Russinovich
Headquarters
Austin, Texas
,
United States
ParentMicrosoft
Websitewww.sysinternals.com

Windows Sysinternals is a website that offers technical resources and utilities to manage, diagnose, troubleshoot, and monitor a Microsoft Windows environment.[1] Originally, the Sysinternals website (formerly known as ntinternals[2]) was created in 1996 and was operated by the company Winternals Software LP,[1] which was located in Austin, Texas. It was started by software developers Bryce Cogswell and Mark Russinovich.[1] Microsoft acquired Winternals and its assets on July 18, 2006.[3]

The website featured several freeware tools to administer and monitor computers running Microsoft Windows. The software can now be found at Microsoft. The company also sold data recovery utilities and professional editions of their freeware tools.

Winternals Software LP

[edit]

Winternals Software LP was founded by Bryce Cogswell and Mark Russinovich, who sparked the 2005 Sony BMG CD copy protection scandal in an October 2005 posting to the Sysinternals blog.[4]

On July 18, 2006, Microsoft Corporation acquired the company and its assets. Russinovich explained that Sysinternals will remain active until Microsoft agrees on a method of distributing the tools provided there.[5] However, NT Locksmith, a Windows password recovery utility, was immediately removed.[citation needed] Most of the source that Sysinternals provided was also removed. Currently, the Sysinternals website is moved to the Windows Sysinternals website and is a part of Microsoft Docs.[1]

In late 2010, Bryce Cogswell retired from Sysinternals.[6]

Products

[edit]

Windows Sysinternals supplies users with numerous free utilities, most of which are being actively developed by Mark Russinovich and Bryce Cogswell,[7] such as Process Explorer, an advanced version of Windows Task Manager,[8] Autoruns, which Windows Sysinternals claims is the most advanced manager of startup applications,[9] RootkitRevealer, a rootkit detection utility,[10] Contig, PageDefrag and a total of 65 other utilities.[11] NTFSDOS, which allowed NTFS volumes to be read by Microsoft's MS-DOS operating system, is now discontinued and is no longer available for download.[11] A larger number of these utilities are nowadays bundled by the publishers for the sake of simpler downloading of all, or most, current versions in the so-called Sysinternals Suite.

Previously available for download was the Winternals Administrator Pak which contained ERD Commander 2005, Remote Recover 3.0, NTFSDOS Professional 5.0, Crash Analyzer Wizard, FileRestore 1.0, Filemon Enterprise Edition 2.0, Regmon Enterprise Edition 2.0, AD Explorer Insight for Active Directory 2.0, and TCP Tools.

On May 18, 2010, Sysinternals released its first new utility since its acquisition by Microsoft. Named RAMMap, it is a diagnostic utility similar to the memory tab of Windows Resource monitor, but more advanced. RAMMap runs only on Windows Vista and later.[12] A system event monitoring tool, Sysmon, was released in 2014, which can collect and publish system events that are helpful for security analysis into the Windows Event Log.[13][14]

In November 2018, Microsoft confirmed it is porting Sysinternals tools, including ProcDump and ProcMon, to Linux.[15]

Licensing issue with Best Buy

[edit]

In April 2006, Geek Squad, a tech support company working in cooperation with Best Buy, was accused of using unlicensed versions of the ERD Commander software. Winternals supplied Best Buy with copies of its software so that Best Buy could evaluate the software while conducting contract negotiations for using it on a permanent basis. When contract talks broke down Best Buy did not notify its Geek Squad Agents to stop using the software and discard all copies. A judge granted a restraining order on April 14, requiring that use of all unlicensed software be stopped, and forcing Best Buy to turn over all copies of Winternals software within 20 days.[16] After settlement, a version of the Winternals software was released to be used by Geek Squad.[17]

See also

[edit]

References

[edit]
  1. ^ a b c d "Windows Sysinternals". Microsoft Docs. Microsoft Corporation. August 12, 2009. Retrieved August 15, 2009.
  2. ^ Mark Russinovich (May 9, 2011). Podnutz Episode #64 - Mark Russinovich Talks Tech (Flash) (Podcast). Podnutz. Event occurs at 0:02:01. Retrieved June 18, 2011. ...that's when Sysinternals started, originally called ntinternals...
  3. ^ "Microsoft Acquires Winternals Software". Company Press Releases. Winternals Software. July 18, 2006. Archived from the original on March 14, 2007. Retrieved March 14, 2007.
  4. ^ Mark Russinovich (October 31, 2005). "Sony, Rootkits and Digital Rights Management Gone Too Far". Sysinternals Blog. Retrieved December 18, 2006.
  5. ^ Mark Russinovich (July 18, 2006). "On My Way to Microsoft!". Sysinternals Blog. Retrieved December 18, 2006.
  6. ^ "Mark Russinovich Discusses Windows Azure", Windows IT Pro. Retrieved on April 16, 2011.
  7. ^ "What is new (August 5, 2009)". Windows Sysinternals. Microsoft Corporation. August 15, 2009. Retrieved August 15, 2009.
  8. ^ "Process Explorer v11.33". Windows Sysinternals. Microsoft Corporation. February 4, 2009. Retrieved August 15, 2009.
  9. ^ "Autoruns for Windows v9.53". Windows Sysinternals. Microsoft Corporation. August 12, 2009. Retrieved August 15, 2009.
  10. ^ "RootkitRevealer v1.71". Windows Sysinternals. Microsoft Corporation. November 1, 2006. Retrieved August 15, 2009.
  11. ^ a b "Sysinternals Utilities Index". Windows Sysinternals. Microsoft Corporation. August 12, 2009. Retrieved August 15, 2009.
  12. ^ Russinovich, Mark; Cogswell, Bryce (May 18, 2011). "RAMMap v1.11". Windows Sysinternals. Microsoft. Retrieved June 12, 2011.
  13. ^ Russinovich, Mark; Garnier, Thomas (June 28, 2019). "Sysmon v10.2". Windows Sysinternals. Microsoft Corporation. Retrieved July 24, 2019.
  14. ^ Russinovich, Mark; Richards, Andrew; Garnier, Thomas (September 29, 2014). "Defrag Tools #108 - Sysinternals SysMon - Mark Russinovich". Windows Sysinternals. Microsoft Corporation. Retrieved July 24, 2019.
  15. ^ Cimpanu, Catalin (November 5, 2018). "Microsoft working on porting Sysinternals to Linux". ZDNet. CBS Interactive. Retrieved November 5, 2018.
  16. ^ "Best Buy's Geek Squad Accused of Pirating Software", FOX News. Retrieved on December 16, 2006.
  17. ^ "Winternals & Best Buy/Geek Squad Settle Federal Lawsuit", Winternals press release. Retrieved on December 16, 2006. Archived March 14, 2007, at the Wayback Machine
[edit]

Retrieved from "https://en.wikipedia.org/w/index.php?title=Sysinternals&oldid=1248667707"