No announcements
-
0 VotesDisplay all network drives
How can I display all network drives? Do I have to do some VB scripting? Thanks. Status Local Remote ...
-
0 Votes
Is it possible to suppress fields in Sysmon's Event Log to reduce its szie?
Example: I want Process Accessed events but don't need the Call Trace field which add a lot to the log size. Is there anywhere to configure Sysmon or event logging in general to suppress ... -
0 Votes
I can't suspend the ACPI.sys process under Process Explorer
Hi. I can't suspend the ACPI.sys process. Any suggestions? ThanksUnanswered | 3 Replies | 323 Views | Created by k4fel - Friday, October 25, 2019 1:46 PM | Last reply by JodyXSP - Friday, February 21, 2020 6:34 PM -
0 Votes
Is this Sysmon behavior regarding Process Accessed Events expected?
Sysmon frequently misses Process Accessed events when the target is short lived. Perhaps the event logging stage drops it while trying to retrieve the meta data? Is this expected ...Unanswered | 1 Replies | 28 Views | Created by Dave Schob - Friday, February 21, 2020 12:59 AM | Last reply by mariora_ - Friday, February 21, 2020 7:53 AM -
0 Votes
BGINFO to query default printer
Hey, I was wondering if there is a way to display the current default printer for win10 devices? thanksAnswered | 5 Replies | 84 Views | Created by srm11671Mo - Wednesday, February 19, 2020 4:34 PM | Last reply by srm11671Mo - Thursday, February 20, 2020 9:18 PM -
0 Votes
Is there a way to rotate backing files?
Hello, I am trying to troubleshoot a problem that occasionally causes the servers I manage to "lock up". I'm hoping to use ProcMon to generate some data about what's going on with the system ...Unanswered | 1 Replies | 31 Views | Created by jflanagan - Thursday, February 20, 2020 4:38 PM | Last reply by mariora_ - Thursday, February 20, 2020 4:59 PM -
1 Votes
Psexec64 via python subprocess - Output truncated
Hi All, I am trying to use Psexec64 via python, by using python's subprocess class. Simply put, I am sending this (for example) as the ...Answered | 3 Replies | 368 Views | Created by orenshani7 - Thursday, October 24, 2019 12:07 PM | Last reply by KevinDemey - Wednesday, February 19, 2020 2:26 AM -
1 Votes
psinfo v1.78 shows incorrect physical memory?
Helllo, See photo. My system has 32GB RAM but psinfo shows "physical memory: 162 MB". Is this a bug or is that not ...Unanswered | 2 Replies | 91 Views | Created by Lumbis - Sunday, February 16, 2020 9:46 PM | Last reply by MikeMilw2002 - Monday, February 17, 2020 4:16 PM -
0 Votes
du.exe shows strange size
Hi, See photo, why the strange "á" in the size? Is this a bug?Unanswered | 1 Replies | 91 Views | Created by Lumbis - Sunday, February 16, 2020 10:15 PM | Last reply by Leon Laude - Sunday, February 16, 2020 10:40 PM -
0 Votes
[Bug] - Process Icon Display Bug in v16.31
It seems like some icons are being randomly replaced in Process Explorer v16.31 by icons from other processes. See the screenshots below - these are taken within a 2-3 ...Discussion | 3 Replies | 207 Views | Created by hey_tommy - Saturday, February 8, 2020 6:01 AM | Last reply by popchoc - Sunday, February 16, 2020 4:58 AM -
0 Votes
bginfo and Server Core 2019
Does bginfo support for Server core 2019? as we are not able to set it. nor we are getting any error via cmd prompt. But we do receive exit code -1073741515 via automation.Proposed | 10 Replies | 1295 Views | Created by M-Rahul - Tuesday, March 5, 2019 7:55 AM | Last reply by mariora_ - Friday, February 14, 2020 11:41 AM -
0 Votes
VMMap no longer shows managed heap on Windows 10 Version 1903
When attached to a .NET or .NET Core process, VMMap no longer shows the managed heap: I know that in May 2019 it was still working (with .NET 4.7.2 and the .NET ...Unanswered | 7 Replies | 401 Views | Created by Kenny Pflug - Monday, November 4, 2019 8:41 AM | Last reply by adam.davidson - Wednesday, February 12, 2020 2:48 PM -
0 Votes
Windows 10 Slideshow is changed to Picture
I have a slide show wall paper with "Fit", in order to use separate backgrounds on different monitors. Bginfo changes the background to Picture instead of Slideshow. All monitors show up the ...Unanswered | 1 Replies | 77 Views | Created by Powershell_newbee - Wednesday, February 12, 2020 3:57 AM | Last reply by mariora_ - Wednesday, February 12, 2020 7:44 AM -
0 Votes
Use Psexec to run the script in reomte PC same as run in locally
Hi I write a shutdown.exe script to restart computer and it have a prompt to user so they can stop the restart process. The script can run in ...Unanswered | 1 Replies | 114 Views | Created by Chongtsz - Tuesday, February 11, 2020 11:54 AM | Last reply by mariora_ - Tuesday, February 11, 2020 1:17 PM -
1 Votes
signout
Hi, How to trouble shoot login and signout using procmon .The problem is sometime signout is spinning ....... ThanksUnanswered | 9 Replies | 148 Views | Created by supportsib - Thursday, February 6, 2020 4:38 AM | Last reply by mariora_ - Saturday, February 8, 2020 10:36 AM -
0 Votes
ctrl2cap
Hello -- I tried to install ctrl2cap and it failed --- I started the cmd shell as admin and got the error that it could not copy the driver into ...Unanswered | 6 Replies | 146 Views | Created by fpefpe - Wednesday, February 5, 2020 5:55 PM | Last reply by fpefpe - Friday, February 7, 2020 10:00 PM -
0 Votes
News from Mark Russinovich on Twitter
Mark tweetted a lot these days.. here some of the announces he made.. Coming soon to Sysmon: clipboard logging for malicious RDP session DFIR, and shredded ... -
0 Votes
[ProcMon][3.53] High memory usage with Drop Filtered Events enabled
Windows 2012 R2 Server has 32 core and 512GB. Was running a long capture for a specific file path for a repro. drop filtered events and ...Unanswered | 1 Replies | 86 Views | Created by Chris_PBC - Thursday, February 6, 2020 8:20 PM | Last reply by mariora_ - Friday, February 7, 2020 7:41 AM -
2 Votes
BgInfo 4.25 x64 not copying user's wallpaper when wallpaper is a PNG file
Hello everyone... is anybody else experiencing this issue? If I choose a jpg to be my wallpaper and apply BgInfo to it. My wallpaper is copied and the lines from the bgi are added ...Unanswered | 6 Replies | 1462 Views | Created by jar3k - Thursday, July 19, 2018 2:20 PM | Last reply by SCCM Newby - Thursday, February 6, 2020 12:22 PM -
0 Votes
SDELETE 2.02 stuck on Purging MFT files
Hi, i've tried to clean the free space on a VM disk to retrieve some unused space for the VMDK file. The drive is about 250GB in size with 180GB of free space. I ...Proposed | 14 Replies | 4320 Views | Created by IT BSC - Wednesday, January 30, 2019 5:39 PM | Last reply by LBX Computer Services - Monday, February 3, 2020 12:41 PM - Items 1 to 20 of 622 Next ›
No announcements
