#procmon — Public Fediverse posts

listent for macOS, ZoomIt, Sysmon, DebugView, NotMyFault, Procmon for Linux, and RAMMap | Sysinternals blog

https://techcommunity.microsoft.com/blog/sysinternals-blog/listent-for-macos-zoomit-sysmon-debugview-notmyfault-procmon-for-linux-and-ramma/4506035

#devtools #windows #linux #utilities #sysinternals #zoomit #procmon

listent for macOS, ZoomIt, Sysmon, DebugView, NotMyFault, Procmon for Linux, and RAMMap | Sysinternals blog

https://techcommunity.microsoft.com/blog/sysinternals-blog/listent-for-macos-zoomit-sysmon-debugview-notmyfault-procmon-for-linux-and-ramma/4506035

#devtools #windows #linux #utilities #sysinternals #zoomit #procmon

🎉 Oh look, #Microsoft *finally* threw #Linux a bone with a 🐌 slow, glitchy version of #Procmon, because who doesn't love a tool that's been missing for decades? 🤣 Meanwhile, #GitHub is busy trying to distract us with #AI buzzwords and shiny new features nobody asked for. 🚀
https://github.com/microsoft/ProcMon-for-Linux #tools #HackerNews #ngated

🎉 Oh look, #Microsoft *finally* threw #Linux a bone with a 🐌 slow, glitchy version of #Procmon, because who doesn't love a tool that's been missing for decades? 🤣 Meanwhile, #GitHub is busy trying to distract us with #AI buzzwords and shiny new features nobody asked for. 🚀
https://github.com/microsoft/ProcMon-for-Linux #tools #HackerNews #ngated

A Linux version of the Procmon Sysinternals tool

https://github.com/microsoft/ProcMon-for-Linux

#HackerNews #Linux #Procmon #Sysinternals #Tool #Microsoft #GitHub

A Linux version of the Procmon Sysinternals tool

https://github.com/microsoft/ProcMon-for-Linux

#HackerNews #Linux #Procmon #Sysinternals #Tool #Microsoft #GitHub

От хаоса к ясности: дедукция против мистики

Привет, Хабр! Сегодня расскажем не столько о решении — оно оказалось простым – сколько о самом процессе его поиска. Он был настолько увлекательным, что в какой-то момент мы почти уверовали в существование магии. Но мы — инженеры, а поэтому как никто знаем, что чудес не бывает. Поэтому, откинув домыслы и иррациональность, мы шаг за шагом распутывали этот технический узел, докапываясь до первопричины проблемы. Приступим же к нашему расследованию. Приятного чтения!

https://habr.com/ru/companies/jetinfosystems/articles/940798/

#ghidra #procmon #tsm #ibm #tivoli

In this post I clarify some misconceptions that I’ve seen regarding how SQL Server accesses files, and potential file permission errors.

This post has a bit of everything, including snark, #PowerShell, Windows, and even some light #ProcMon use.

#sqlserver #sqldba #microsoftsqlserver #mssqlserver #mssql #mssqldba #security #Windows

https://vladdba.com/2025/01/26/what-people-get-wrong-about-how-sql-server-accesses-files/

I saw a demo of #StratoShark at SharkFest in November. It will be useful addition to #malwareanalysis toolkit.
Imagine #procmon and #apimonitor (or strace/ltrace) with user interface of #wireshark, including support for powerful wireshark display filters.

#blueteam #dfir #sf24eu @wireshark @geraldcombs

RE: https://infosec.exchange/@geraldcombs/113680686165407123

I saw a demo of #StratoShark at SharkFest in November. It will be useful addition to #malwareanalysis toolkit.
Imagine #procmon and #apimonitor (or strace/ltrace) with user interface of #wireshark, including support for powerful wireshark display filters.

#blueteam #dfir #sf24eu @wireshark @geraldcombs

RE: https://infosec.exchange/@geraldcombs/113680686165407123

Capturing #malware activity with #procmon https://buff.ly/3QhkcgK

Capturing #malware activity with #procmon https://buff.ly/3QhkcgK

Как реализовать поведенческий анализ в Linux на уровне гипервизора

Привет, Хабр! Меня зовут Алексей Колесников, я работаю в отделе обнаружения вредоносного ПО экспертного центра безопасности Positive Technologies (PT Expert Security Center, PT ESC). Недавно я выступил на международной конференции AVAR 2023, которая проходила в Дубае. Рассказывал про новые плагины, разработанные PT Expert Security Center для опенсорсной системы динамического анализа вредоносного программного обеспечения DRAKVUF, и показывал, как с их помощью в песочнице PT Sandbox детектировать актуальные угрозы для Linux. Под катом мини-обзор популярных инструментов для мониторинга вредоносов в Linux, о работе наших плагинов в DRAKVUF и анализ ВПО с их использованием.

https://habr.com/ru/companies/pt/articles/783024/

#drakvuf #linux_kernel #cybersecurity #ядро_ос #кибербезопасность #плагины #эксплуатация_уязвимостей #песочница #procmon #linux

I will admit, I reach for #strace quickly, like I reach for #procmon on Windows. Same root cause (other than me being impatient).

I will admit, I reach for #strace quickly, like I reach for #procmon on Windows. Same root cause (other than me being impatient).

Sysinternals - I have just completed this room! Check it out: https://tryhackme.com/room/btsysinternalssg #tryhackme #sysinternals #procmon #psexec #procexp #btsysinternalssg via @RealTryHackMe

I completed Day 12 #TryHackMe #AdventOfCyber2022 challenge one day late.

Day 12 focuses on #MalwareAnalysis using the tools #DetectItEasy, #CAPA, and #Procmon on a #FlareVM.

This was another interesting challenge.

#Infosec #Malware

I completed Day 12 #TryHackMe #AdventOfCyber2022 challenge one day late.

Day 12 focuses on #MalwareAnalysis using the tools #DetectItEasy, #CAPA, and #Procmon on a #FlareVM.

This was another interesting challenge.

#Infosec #Malware

Found myself teaching #ProcMon and #Troubleshooting to a peer again today. It was an essential skill in a previous role and one that everyone should have in their tool box.

Additional tools include #AuditPol and #Sysmon

I cover two of those (Sys and Procmon) in this video.

Give it a watch, share it around, etc....

https://youtu.be/rr5CI7rakkU?t=2453

These are great tools to use when more advanced malware sandboxing tools aren't available. VM and #Sysinternals

#DFIR #Forensics #HelpDesk #Malware

Found myself teaching #ProcMon and #Troubleshooting to a peer again today. It was an essential skill in a previous role and one that everyone should have in their tool box.

Additional tools include #AuditPol and #Sysmon

I cover two of those (Sys and Procmon) in this video.

Give it a watch, share it around, etc....

https://youtu.be/rr5CI7rakkU?t=2453

These are great tools to use when more advanced malware sandboxing tools aren't available. VM and #Sysinternals

#DFIR #Forensics #HelpDesk #Malware