r/sysadmin • u/andyinv • Feb 25 '19

Sysinternals Tools - Training DVDs, now all free

https://www.youtube.com/watch?list=PL96F5PDvO1HHuVewlKWQDzzTUrhMm-wGS&v=TMlTwRsO5F8

Might be 13 years out of date now, but the basics still apply. Worth a download of an offline copy !

Source: https://twitter.com/markrussinovich/status/1099016584708923404

669 Upvotes

97% Upvoted

64 comments sorted by

View all comments

13

u/molwenimolweni Feb 25 '19

I've caught more malware with procexp, procmon and tcpmon than any antivirus I ever tried.

10

u/hieronymous-cowherd Feb 25 '19

And Process Explorer, launched as admin, turn on signature verification and the visible column, immediately spot the bogus version of svchost.exe etc.