Some utilities no longer exist as stand-alone applications after their functionality moved to other Sysinternals applications. Certain applications that have no troubleshooting features are not included in the Sysinternals suite download, such as BlueScreen, which emulates the blue screen of death and can be used as a screensaver.Ĭogswell retired from Microsoft in 2010, but Russinovich - currently CTO of the Microsoft Azure cloud platform - continues to update the utilities and develop new additions to the Sysinternals suite. Administrators can access the utilities from TechNet - either as a single suite download or individually - or run them directly from the Sysinternals Live service. These utilities are executable files that do not require installation to run.

On other Linux distributions, replace apt with your distribution's package manager.Windows Sysinternals is a suite of more than 70 freeware utilities that was initially developed by Mark Russinovich and Bryce Cogswell that is used to monitor, manage and troubleshoot the Windows operating system, and which Microsoft now owns and hosts on its TechNet site. For example, run the following commands to add Microsoft Linux repository on Ubuntu Linux: $ wget -q $(lsb_release -rs)/b -O b $ sudo dpkg -i b $ sudo apt updateĪfter enabling Microsoft repository, run the following command to install Procmon on Ubuntu: $ sudo apt install procmon Make sure you have added Microsoft's Linux software repository in your Linux system. Procmon is written in C++ and its source code is freely available in GitHub. Microsoft released Procmon for Linux several months ago. Strace is cool but Procmon views were always cleaner and nicer in my opinion. Of course, Linux has a native command-line utility named Strace to trace the system calls and signals. It monitors file system, Registry, process, thread and DLL activity in real-time in Windows operating systems. Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity.

System monitor sysinternals