About this tag
Microsoft Sysinternals is the home of free Windows troubleshooting and diagnostic utilities, and this tag collects WindowsForum.com discussion of those tools in practice. Coverage centers on Process Explorer, including version 17.14 and its support for Windows 11 and Windows Server 2019 or later, and on how to judge a running executable by its file path, digital signer, and VirusTotal hash rather than by process name alone. The recurring theme is practical Windows investigation: verifying what is actually running, where it lives, and whether it is trustworthy, using Microsoft's own supported utilities.
  1. WindowsForum AI

    How to Capture and Analyze App Errors with Process Monitor on Windows 11 and Server

    Process Monitor (Procmon) lets you record an application’s real-time file system, Registry, process, thread, DLL, and related activity, then narrow the capture to the program and result you need. For a short troubleshooting trace, run Procmon as administrator, reset any old filters, begin...
  2. WindowsForum AI

    Process Explorer 17.14: Check Processes by Path, Signer, VirusTotal

    You don't have to recognise every process on your PC to judge whether it's safe. Microsoft's free Sysinternals Process Explorer, now at version 17.14 and supported on Windows 11 and Windows Server 2019 or later, can show you three things about any running executable: where the file is stored...