We're excited to release ProcExp v17.1, SDelete v2.06, and Sysmon 1.5.1 for Linux with bug fixes. Read the blog post for the complete list. Get the tools at sysinternals.com. See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...

Microsoft Build

#thechapelbar #vienna

I always see myself in handcuffs.

I started a blog ✨ Beyond Breaking In — notes to the former me, to the future you. Honest reflections on tech, growth, and the stuff nobody talks about enough. First post is live (with audio! 🎧) 👉🏿 beyondbreaking.in

📣 It's happening! 📣 Come meet the new Aspire at #AspireConf on March 23. Join our livestream at 9am PT for a packed day of sessions for all developers, no matter your skill, language, or stack. Save the date: aspire.dev/aspireconf?c... #Python #TypeScript #JavaScript #dotnet #AI #AspireDev

Azure Front Door - RestrictedIP blog.patrickmatula.com/posts/azuref...

Obsidian 1.12.0 (early access) is now available to Catalyst members for desktop and mobile. - Obsidian CLI - Bases search - Images can now be resized in Live Preview - When deleting a file, linked images can now be automatically deleted with it

We're excited to release ZoomIt with a video trim editor, Sysmon for Linux with EBPF events, and DebugView, RAMMap, RDCMan with bug fixes! Get the tools at sysinternals.com. See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...

Remote Desktop client (MSI) release notes. There is room for improvement. When writing release notes, please don’t copy and paste generic information. We want to know what has changed. #azure #remotedesktop #msi

The Intune Expedite policy is a cool feature, but how are we supposed to know the mapping between a KB article and its description in Intune? #intune

Did you know if you see a dialog like this, you can press CTRL + C to copy the text out?

Microsoft's Q2 2026 (fiscal) earnings: • 💻 Windows OEM + devices revenue up 1% • 👾 Gaming rev down 9% • 🕹️ Xbox content + services rev down 5% • 🎮 Xbox hardware rev down 32% full details here 👇 www.theverge.com/news/869493/...

scoop: Microsoft is working to rebuild trust in Windows. The head of Windows tells me Microsoft will focus on "addressing pain points we hear consistently from customers." Full details in my Notepad newsletter this week, gift link here 👇 tinyurl.com/win11trust

Oh hey. We announced *when* we're disabling NTLM by default. Hint: soon.

Azure Front Door: Implementing lessons learned following October outages techcommunity.microsoft.com/blog/azurene...

The widgets are super cool!

Obsidian 1.11 is now available for desktop and mobile! The new mobile design gives more space to your notes, and helps you quickly navigate your vault. You can now instantly access Obsidian from your lock screen, home screen, control center, Shortcuts, and Siri.

Holy crap I'm cited in a 2023 academic law paper... about a pull request on GitHub for a security fix I have neglected to integrate for five years LOL. ir.lawnet.fordham.edu/cgi/viewcont...

Looks like the public release is coming soon :)

ICYMI: WINS IS GETTING REMOVED FROM FUTURE WINDOWS SERVER RELEASES. This should be a Non-Event because you should have migrated to DNS over a decade ago. Right? support.microsoft.com/en-us/topic/...

.NET Lab can now display disassembled machine code. It's taken directly from JIT, hence only supported on desktop for now. #dotnet #csharp #roslyn #asm #dotnetlab

Does anyone know something about this book "COM and DCOM Demystified: Comprehensive Guide to Component-Based and Distributed Windows Programming" ? #windowsinternals www.amazon.de/dp/B0FW49ZMC5

Years ago I wrote a (very effective) blog post where I pointed out that Windows needed a better way of naming threads. Microsoft listened and they added a very sane API for naming threads. Yay! But for a long time they didn't actually name their own threads. But now DWM has thread names. Uh, yay?

Isn't it possible to cancel a queued run? :(

This is a detailed article about the outage. I also like that they show what assumptions they had (even if they turned out to be wrong), because that's exactly what real-life troubleshooting is like. You get a lot of clues, and you usually don’t find the actual solution right away.

Microsoft is adding Sysmon directly into Windows. The Sysinternals utility will make it easier for security teams to detect and respond to threats www.theverge.com/news/822023/...

aspire.dev!

Visual Studio 2026 is now generally available! #VisualStudio2026 devblogs.microsoft.com/visualstudio...

T-Minus 1 Day .NET Conf 2025 in on its way... #VisualStudio2026 is redefining dev! Join us tomorrow at .NET Conf to explore next-gen features. Free & virtual—don’t miss this future-focused event! Read the Visual Studio Blog for more info: msft.it/63322tH9B2

I made a little demo for revealing an image behind some mouse movement! I think it could be a cool web component but I'm too lazy to do that right now. codepen.io/cassidoo/pen...

My GitHub repo summarizes different learning resources about Windows Internals. github.com/patrickmatul... If you're missing a course or something that feels "course-like", let me know and I'll add it. #windowsinternals

What do you think about WinAPI monitoring in ProcMon as a new feature? I posted the suggestion in the official LinkedIn Sysinternals group: www.linkedin.com/feed/update/... #sysinternals

Visual Studio 2026 just dropped its Insiders Release. Daniel Ward and Mads Kristensen discuss all the new goodies. Highlights include: ➡️ Deep Copilot + Profiler Agent integration ➡️ DevBox/RDP ➡️ Sleek modern UI Check out Daniel's blog, msft.it/63322t6Mgn #visualstudio #dotNET

👀👀👀 #sysinternals #zoomit

Cheesecake mousse with berry sauce & biscuit ice cream Restaurant: El Gaucho in Baden, Austria.

I've submitted my entry for the Bad UX World Cup! A date picker where the values get populated by a snake game. The apple is a number that changes randomly. Try it out at safia.rocks/BadDatePicker/ 🤪

🚀 New Sysinternals updates just dropped! ZoomIt now supports image smoothing for crisper visuals ProcDump for Linux adds restracking - no triggers needed Grab the latest tools at sysinternals.com. See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...

Interesting memory dump analysis in WinDbg. I think it's very useful not to show only the "golden path" to the solution!

OST2 is an amazing (and free!) platform for learning.

next goal: 12 hour stream :D

After so many posts about Sysinternals, you may be interested in learning more about the Sysinternals Suite. The official reference is the book "Troubleshooting with the Windows Sysinternals Tools" written by @markrussinovich.bsky.social and Aaron Margosis.

It's possible to explore the stack of specific threads in Process Explorer. Unfortunately, the stack will not resolve properly without some modifications. Usually, you need to install the Debugging Tools for Windows (from the Windows SDK) and set the DbgHelp.dll path correctly.

not just one, but TWO streams this week!!! tomorrow at 7p EST, join us to celebrate the release of #aspire 9.5 (👀👀👀 stay tuned for more info), and for #aspirifridays we're going to try to deploy bingo AGAIN. subscribe!! see you soon! www.youtube.com/watch?v=29zI... www.youtube.com/watch?v=80ck...

You probably know about Autoruns. It's a great tool for analyzing startup apps from different sources. But do you also know the CLI version? It's called AutorunsC — great for exporting or piping the output, but you can't disable or delete entries with it. #sysinternals

Big news for .NET developers! Starting with .NET 9, Standard Term Support (STS) releases will now be supported for 24 months instead of 18. Learn why this change matters and how it impacts your upgrade plans: msft.it/63320sWrrj #dotnet #DeveloperUpdates

Why would lsass.exe consume an entire core of CPU time for minutes at a time? An ETW trace shows that it is spending its time in efscore.dll!EfspGetUserDecryptionKeyForHash. Inside that it spends most of its time opening/closing files in AppData\Roaming\Microsoft\SystemCertificates\My\Certificates

During your troubleshooting adventure, it's common that you want to filter to all write access. That's very easy with Process Monitor. You can just filter to Category is Write. That will work for file and registry activities. #sysinternals

Sysinternals continuously develops new tools, and it's not even limited to Windows. There is ProcDump for Linux (github.com/microsoft/Pr...) by @mariohewardt.com.