VMMap v2.61: This fixes a minor bug in the calculation of the Unknown category total.

Process Explorer v12: This Process Explorer release includes several significant new features, including the showing the web hosted in IE8 processes in the process tooltip, display of a svchost’s service host category in its tooltip, mapping of service...

Process Explorer v12.01: This update fixes a bug that prevented DEP status being shown on Windows XP and the threads page of the process properties dialog from showing service names on Windows Vista.

Process Monitor v2.9: This update to Process Monitor adds translations for more error codes, the ability to disable individual filter entries, and a debugging API so that developers can insert debug output into the Process Monitor event stream (John Robbins...

Process Explorer v12.03: This update revs the driver name so that it is used even when the previous driver is already loaded.

Mark’s Blog: The Case of the Printing Failure - Mark’s most recent post in the Case of the Unexplained series describes the troubleshooting steps, which include use of Procdump and Process Monitor, an administrator went through when printing...

LogonSessions v1.21: This fixes a bug that prevented logonsessions from showing full token information in some cases on 64-bit windows. Microsoft CLR Team Blog Post on VMMap and Managed Code: The Microsoft CLR Team has written a great article explaining...

RAMMap v1.0: Have you ever wondered how Windows allocates physical memory or what’s using it? RAMMap is a new utility for analyzing system RAM usage on Windows Vista and Windows 7 that provides insight never before available. RAMMap shows information...

Coreinfo v2.1: Memory access from a processor to memory on remote NUMA nodes takes longer than local-node memory accesses. In addition to dumping NUMA topology information, Coreinfo now measures and displays the internode access costs on NUMA systems...

Coreinfo v2.11: Coreinfo does require XP 64-bit or higher for client (server 2003 or higher for server). This update fixes the bug where it would fail to launch on 32-bit XP instead of reporting compatibility requirements. [reposting this due to...

Mark’s Blog: The Case of the Unexplained IE Crash - Mark goes on a detective hunt to find out the likely culprit of an IE crash he recently experienced. In the post, he shows how to find which process out of multiple running the same executable...

Autoruns v10.01: This fixes a bug in the Registry jump-to function for HKCU registry paths.

RAMMap v1.1: This update to RAMMap, a memory analysis utility for Windows Vista and Windows 7, adds the ability to purge working sets and memory manager paging lists. This can be useful for measuring the memory usage of applications after they’ve...

Disk2vhd v1.6: Disk2vhd now includes better error handling for failed snapshots, guarantees that the system is bootable even if the system crashes while Disk2vhd is updating the system to make it compatible with Virtual PC, and supports direct-attached...

TCPView v3.0: This major update to TCPView, a TCP/UDP endpoint viewing utility, adds endpoint send and receive statistics by leveraging ETW when TCPView is run with administrative rights. It also breaks ports and addresses into separate columns. Autoruns...

TCPView v3.01: TCPView v3.01 addresses a minor drawing bug when running on Windows XP. Disk2vhd v1.62: This update fixes a bug in the HAL fixup code that could prevent a converted image from booting under Virtual PC. AdExplorer v1.42: This addresses...

TCPView v3.02: Fixes a GDI handle leak.

ProcDump v2.0: This major update to ProcDump, a tool that captures process dumps based on process CPU usage, memory consumption, and other behaviors, can now be configured to generate dumps based on the values of system performance counters. Process...

WinObj v2.2: This update to WinObj, an Object Manager namespace viewing utility, has several enhancements including column sorting, settings persistence and the ability to follow symbolic links to their target object when you double-click on one. Junction...

Windows Sysinternals Primer: Process Explorer, Process Monitor and More Check out a great introduction to some key Sysinternals tools in this recording of the TechEd US session Aaron Margosis, coauthor of the forthcoming Sysinternals Administrator's Reference...

WinObj v2.21: This release fixes a bug related to minimizing and restoring the WinObj window.

ProcDump v2.01: ProcDump now generates a dump file name based on the date and time if no file name is specified, adds support for per-process performance counters, and reports in the dump comment for performance counter triggers the biggest CPU consuming...

Autoruns v10.04: This fixes a toolbar drawing bug that shows on Windows XP.

LiveKd v5.0: LiveKd, a tool that enables live kernel debugging of Windows systems, can now debug and generate kernel dump files of Hyper-V Windows virtual machines from the parent partition without having to boot the target virtual machine in debug mode...

Watch Mark Live from the PDC on October 28/29 Mark is participating in the keynote and delivering three breakout sessions at the Microsoft Professional Developer’s Conference (PDC) on Microsoft’s campus next week. Tune in live via hi-definition...