File and Disk Utilities
 

• AccessChk
   

  This tool shows you the accesses the user or group you specify has to files, Registry keys or Windows services.

• AccessEnum
   

  This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions.

• CacheSet
   

  CacheSet is a program that allows you to control the Cache Manager's working set size using functions provided by NT. It's compatible with all versions of NT.

• Contig
   

  Wish you could quickly defragment your frequently used files? Use Contig to optimize individual files, or to create new files that are contiguous.

• DiskExt
   

  Display volume disk-mappings.

• DiskMon
   

  This utility captures all hard disk activity or acts like a software disk activity light in your system tray.

• DiskView
   

  Graphical disk sector utility.

• Disk Usage (DU)
   

  View disk usage by directory.

• EFSDump
   

  View information for encrypted files.

• FileMon
   

  This monitoring tool lets you see all file system activity in real-time.

• Junction
   

  Create Win2K NTFS symbolic links.

• LDMDump
   

  Dump the contents of the Logical Disk Manager"s on-disk database, which describes the partitioning of Windows 2000 Dynamic disks.

• MoveFile
   

  Schedule file rename and delete commands for the next reboot. This can be useful for cleaning stubborn or in-use malware files.

• NTFSInfo
   

  Use NTFSInfo to see detailed information about NTFS volumes, including the size and location of the Master File Table (MFT) and MFT-zone, as well as the sizes of the NTFS meta-data files.

• PageDefrag
   

  Defragment your paging files and Registry hives!

• PendMoves
   

  See what files are scheduled for delete or rename the next time the system boots.

• Process Monitor
   

  Monitor file system, Registry, process, thread and DLL activity in real-time.

• PsFile
   

  See what files are opened remotely.

• PsTools
   

  The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more.

• SDelete
   

  Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program.

• ShareEnum
   

  Scan file shares on your network and view their security settings to close security holes.

• Sigcheck
   

  Dump file version information and verify that images on your system are digitally signed.

• Streams
   

  Reveal NTFS alternate streams.

• Sync
   

  Flush cached data to disk.

• VolumeID
   

  Set Volume ID of FAT or NTFS drives.

Networking Utilities AD Explorer Active Directory Explorer is an advanced Active Directory (AD) viewer and editor. AD Insight AD Insight is an LDAP (Light-weight Directory Access Protocol) real-time monitoring tool aimed at troubleshooting Active Directory client applications. AdRestore Undelete Server 2003 Active Directory objects. PipeList Displays the named pipes on your system, including the number of maximum instances and active instances for each pipe. PsFile See what files are opened remotely. PsTools The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more. ShareEnum Scan file shares on your network and view their security settings to close security holes. TCPView Active socket command-line viewer. Whois See who owns an Internet address.   Process Utilities Autoruns See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings. FileMon This monitoring tool lets you see all file system activity in real-time. Handle This handy command-line utility will show you what files are open by which processes, and much more. ListDLLs List all the DLLs that are currently loaded, including where they are loaded and their version numbers. Version 2.0 prints the full path names of loaded modules. PortMon Monitor serial and parallel port activity with this advanced monitoring tool. It knows about all standard serial and parallel IOCTLs and even shows you a portion of the data being sent and received. Version 3.x has powerful new UI enhancements and advanced filtering capabilities. Process Explorer Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process. Process Monitor Monitor file system, Registry, process, thread and DLL activity in real-time. PsExec Execute processes remotely. PsGetSid Displays the SID of a computer or a user. PsKill Terminate local or remote processes. PsList Show information about processes and threads. PsService View and control services. PsSuspend Suspend and resume processes. PsTools The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more. RegMon This monitoring tool lets you see all Registry activity in real-time. ShellRunas Launch programs as a different user via a convenient shell context-menu entry. VMMap See a breakdown of a process's committed virtual memory types as well as the amount of physical memory (working set) assigned by the operating system to those types. Identify the sources of process memory usage and the memory cost of application features.  Top of page   Security Utilities AccessChk This tool shows you the accesses the user or group you specify has to files, Registry keys or Windows services. AccessEnum This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions. Autologon Bypass password screen during logon. Autoruns See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings. LogonSessions List active logon sessions NewSID Learn about the computer SID problem everybody has been talking about and get a free computer SID changer, NewSID. Process Explorer Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process. PsExec Execute processes with limited-user rights. PsLoggedOn Show users logged on to a system. PsLogList Dump event log records. PsTools The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more. RootkitRevealer Scan your system for rootkit-based malware SDelete Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program. ShareEnum Scan file shares on your network and view their security settings to close security holes. ShellRunas Launch programs as a different user via a convenient shell context-menu entry. Sigcheck Dump file version information and verify that images on your system are digitally signed. Top of page   System Information Utilities Autoruns See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings. ClockRes View the resolution of the system clock, which is also the maximum timer resolution. Coreinfo Coreinfo is a command-line utility that shows you the mapping between logical processors and the physical processor, NUMA node, and socket on which they reside, as well as the cache’s assigned to each logical processor. Filemon This monitoring tool lets you see all file system activity in real-time. Handle This handy command-line utility will show you what files are open by which processes, and much more. LiveKd Use Microsoft kernel debuggers to examine a live system. LoadOrder See the order in which devices are loaded on your WinNT/2K system. LogonSessions List the active logon sessions on a system. PendMoves Enumerate the list of file rename and delete commands that will be executed the next boot. Process Explorer Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process. Process Monitor Monitor file system, Registry, process, thread and DLL activity in real-time. ProcFeatures This applet reports processor and Windows support for Physical Address Extensions and No Execute buffer overflow protection. PsInfo Obtain information about a system. PsLoggedOn Show users logged on to a system PsTools The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more. RegMon This monitoring tool lets you see all Registry activity in real-time. WinObj The ultimate Object Manager namespace viewer is here.  Top of page