Skip to content

Sysinternals suite

Named by 2 kept items in this workspace.

Search every workspace for Sysinternals suite. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • repo2026-10-09It is written here as Sysinternals Suite: Windows utilities including Process Monitor, Process Explorer and Autoruns.
  • repoIt is written here as Sysinternals suite (Procdump, PsService, PsSuspend, PsLogList, Sdelete, Process Explorer, Process Monitor, Accesschk).

    Legitimate admin/forensic tools often abused; multiple rules updated with ARM64 (*64a.exe) variant coverage

All technologies in this workspace.