Hacker News new | ask | show | jobs
by vsto 1792 days ago
Although they don't contain a registry editor, the Windows Sysinternals tools from Microsoft have some great ones like Process Explorer (task manager replacement), Process monitor (shows all real-time Registry activity as well), ZoomIt (great for screen drawing during presentations) and so on. Written by Azure's CTO way before the cloud existed :)

https://docs.microsoft.com/en-us/sysinternals/downloads/

1 comments

Instead of process explorer, I highly recommend people to use Process Hacker[0]. It's open source, contains a lot of information missing from process explorer, and has a much cleaner user interface.

Another great one is WinObjEx64[1], which allows exploring the NT namespace.

[0]: https://github.com/processhacker/processhacker

[1]: https://github.com/hfiref0x/WinObjEx64

I like that Process Hacker has broader set of features, but what I am missing compared to Process Explorer is the the ability to quickly identify the process by using the "sniper" and the integration with VirusTotal. I wish there was a single tool with all the bells and whistles :) Maybe I should start contributing to FOSS.
ProcessHacker has both VirusTotal integration and the sniper feature, at least in the nightly builds (Called Process Hacker 3). I highly recommend using the nightly builds, they are packed with amazing features.