603 – Sysinternals @ 25

clip_image002A long time ago in a different era, a young engineer and his friend founded a company called Winternals, which cooked up some tools to look inside the way Windows operated. The utilities were used to understand the way things really worked and went on to provide technologists a variety of ways to troubleshoot issues and optimize performance.

Early and popular tools, which went on to be published on the sysinternals.com website, included RegMon – which monitors what was happening in the Windows Registry – and FileMon, which kept an eye on the file system. Both of these tools could help a user figure out what an application is doing, maybe to check it’s not misbehaving, or seeking undocumented settings where the app might be looking to see if a particular file or registry key existed. Sysinternals made the tools free, and since Winternals was acquired by Microsoft in 2006, they still are.

clip_image004Co-founder Mark Russinovich wrote lots of other fun and useful stuff. For giggles, he built the first BSOD screensaver and a means to remotely deploy it on someone else’s PC, making them think it had crashed, probably causing them to turn it off and on again. Or the ZoomIt tool that he used to great effect in his keynote speeches which were always a highlight at events like TechEd or Ignite. Watching thousands of geeks queueing for an hour to make sure they can get a seat near the front almost invites Jobs-ian comparisons. For what can be relatively dry content, Mark has a great way of talking about how the technology really works and manages to be quite interesting: even if half of the concepts fly straight over your head, the rest is generally worth listening to – like a Brian Cox lecture.

clip_image006After joining Microsoft, Mark continued to build SysInternals tools and replaced RegMon and FileMon, with Process Monitor aka ProcMon. Another big utility, Process Explorer, is a kind of shibboleth amongst Windows techies… if you’re still using TaskMan to look under the hood, then you’re just not hard enough.

Despite moving to becoming the CTO for Azure and being a member of the most Technical Fellows, he still has a hand in with Sysinternals, culminating recently in a celebration of the 25th anniversary of the first set of utilities. The day-long virtual conference gave deep dive sessions into a few of the most popular tools, along with an interesting fireside chat with Mark and an overview of Sysinternals tools for Linux. See the recording here.

Oh, and one more thing. The Sysinternals Suite is now available in the Windows Store – so you can grab the latest versions of all the core tools (70 of them… yes, that’s right, 70, and for how much?) with just a few clicks.

Leave a Reply

Your email address will not be published. Required fields are marked *