Years ago I wrote a (very effective) blog post where I pointed out that Windows needed a better way of naming threads. Microsoft listened and they added a very sane API for naming threads. Yay! But for a long time they didn't actually name their own threads. But now DWM has thread names. Uh, yay?

Isn't it possible to cancel a queued run? :(

This is a detailed article about the outage. I also like that they show what assumptions they had (even if they turned out to be wrong), because that's exactly what real-life troubleshooting is like. You get a lot of clues, and you usually don’t find the actual solution right away.

Microsoft is adding Sysmon directly into Windows. The Sysinternals utility will make it easier for security teams to detect and respond to threats www.theverge.com/news/822023/...

aspire.dev!

Visual Studio 2026 is now generally available! #VisualStudio2026 devblogs.microsoft.com/visualstudio...

T-Minus 1 Day .NET Conf 2025 in on its way... #VisualStudio2026 is redefining dev! Join us tomorrow at .NET Conf to explore next-gen features. Free & virtual—don’t miss this future-focused event! Read the Visual Studio Blog for more info: msft.it/63322tH9B2

I made a little demo for revealing an image behind some mouse movement! I think it could be a cool web component but I'm too lazy to do that right now. codepen.io/cassidoo/pen...

My GitHub repo summarizes different learning resources about Windows Internals. github.com/patrickmatul... If you're missing a course or something that feels "course-like", let me know and I'll add it. #windowsinternals

What do you think about WinAPI monitoring in ProcMon as a new feature? I posted the suggestion in the official LinkedIn Sysinternals group: www.linkedin.com/feed/update/... #sysinternals

Visual Studio 2026 just dropped its Insiders Release. Daniel Ward and Mads Kristensen discuss all the new goodies. Highlights include: ➡️ Deep Copilot + Profiler Agent integration ➡️ DevBox/RDP ➡️ Sleek modern UI Check out Daniel's blog, msft.it/63322t6Mgn #visualstudio #dotNET

👀👀👀 #sysinternals #zoomit

Cheesecake mousse with berry sauce & biscuit ice cream Restaurant: El Gaucho in Baden, Austria.

I've submitted my entry for the Bad UX World Cup! A date picker where the values get populated by a snake game. The apple is a number that changes randomly. Try it out at safia.rocks/BadDatePicker/ 🤪

🚀 New Sysinternals updates just dropped! ZoomIt now supports image smoothing for crisper visuals ProcDump for Linux adds restracking - no triggers needed Grab the latest tools at sysinternals.com. See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...

Interesting memory dump analysis in WinDbg. I think it's very useful not to show only the "golden path" to the solution!

OST2 is an amazing (and free!) platform for learning.

next goal: 12 hour stream :D

After so many posts about Sysinternals, you may be interested in learning more about the Sysinternals Suite. The official reference is the book "Troubleshooting with the Windows Sysinternals Tools" written by @markrussinovich.bsky.social and Aaron Margosis.

It's possible to explore the stack of specific threads in Process Explorer. Unfortunately, the stack will not resolve properly without some modifications. Usually, you need to install the Debugging Tools for Windows (from the Windows SDK) and set the DbgHelp.dll path correctly.

not just one, but TWO streams this week!!! tomorrow at 7p EST, join us to celebrate the release of #aspire 9.5 (👀👀👀 stay tuned for more info), and for #aspirifridays we're going to try to deploy bingo AGAIN. subscribe!! see you soon! www.youtube.com/watch?v=29zI... www.youtube.com/watch?v=80ck...

You probably know about Autoruns. It's a great tool for analyzing startup apps from different sources. But do you also know the CLI version? It's called AutorunsC — great for exporting or piping the output, but you can't disable or delete entries with it. #sysinternals

Big news for .NET developers! Starting with .NET 9, Standard Term Support (STS) releases will now be supported for 24 months instead of 18. Learn why this change matters and how it impacts your upgrade plans: msft.it/63320sWrrj #dotnet #DeveloperUpdates

Why would lsass.exe consume an entire core of CPU time for minutes at a time? An ETW trace shows that it is spending its time in efscore.dll!EfspGetUserDecryptionKeyForHash. Inside that it spends most of its time opening/closing files in AppData\Roaming\Microsoft\SystemCertificates\My\Certificates

During your troubleshooting adventure, it's common that you want to filter to all write access. That's very easy with Process Monitor. You can just filter to Category is Write. That will work for file and registry activities. #sysinternals

Sysinternals continuously develops new tools, and it's not even limited to Windows. There is ProcDump for Linux (github.com/microsoft/Pr...) by @mariohewardt.com.

I'm not sure how I missed this article on Entra Kerberos, but it's the most comprehensive documentation I've seen yet, absolutely fantastic If this is the "Introduction to Microsoft Entra Kerberos", I'm honestly a little scared to see the deep dive 🫣😅 learn.microsoft.com/...

Sysinternals jcd (jump change directory) is a Rust-based command-line tool that provides enhanced directory navigation with substring matching and smart selection. It's like the cd command, but with superpowers! medium.com/@marioh_7832...

ProcMon & ProcDump is a great combination. ProcDump sends the output to ProcMon. The operation is "Debug Output Profiling" and gives a unified view. Reference: Troubleshooting with the Windows Sysinternals Tools (page: 213) #sysinternals

Did someone forget to bump the version number? :D #visualstudio

@debugger.bsky.social is always a good resource for debugging. That’s going to be my weekend read.

Trying to learn some .NET / coding things.. I tried to implement Dependency Injection for my WPF application Recycli. github.com/patrickmatul... Version 0.3 is out :-)

ProcMon captures a lot of data. If you have a problem that occurs, for example, once a week, you can't just run ProcMon for a week. But if you know exactly what you are looking for, you can enable Filter -> Drop Filtered Events. That helps a lot for longer ProcMon sessions ;-) #sysinternals

I enjoyed it a lot. It's interesting to get these insights and also to hear what skill set is important for specific roles. There is also some fun trivia in that video — at least I didn't know that there is only one person at Microsoft with the title Senior Technical Fellow ;-)

Hey folks it's time! #VisualStudio2026 devblogs.microsoft.com/visualstudio...

Visual Studio 2026 has just landed! #VisualStudio2026 review.learn.microsoft.com/en-us/visual...

Sysmon is a tool to monitor various activities on a system. It logs to the Windows Event Log and from there it can be easily centralized. It makes sense to have a starter template.

Hey "Mark and Scott Learn To..." podcast listeners @markrussinovich.bsky.social what are some topics you'd like us to cover?

Process Monitor (ProcMon) is a great tool for troubleshooting various problems. One of the things you'll see in the result column is "BUFFER OVERFLOW".

DebugView is a tool to capture debug output. If you want to capture Boot activity, you can choose "Log Boot" from the capture menu. That results in a kernel driver and load early in the boot sequence. Reference: Troubleshooting with the Windows Sysinternals Tools (page 287) #sysinternals #debugging

If can spare a minute, please answer this 3 question survey on your IT/technical book buying habits. Thank you. The survey is open until 11 Sept . freeonlinesurveys.co...

We need more posts about the Sysinternals Suite on Bluesky. I'll post something about the Sysinternals Suite every 3 days in September. #sysinternals

The latest public release of the Windows App improves proxy support. I know... it's not mentioned in the release notes, but it is the case :-) #windows365 #devbox #microsoft #remotedesktop #cloudpc #windowsapp learn.microsoft.com/en-us/window...

#modernkorean #vienna

Aspire Roadmap 2025: Code-first DevOps, polyglot, and AI by @victorfrye.com victorfrye.com/blog/posts/a... #aspire

Entertaining, insanely fun, and educational — 5 hours well spent.

www.youtube.com/@NT-dd8rw/fe... is a curated list of Windows NT internals videos. #windowsinternals