{"id":649309,"date":"2013-03-28T08:21:07","date_gmt":"2013-03-28T12:21:07","guid":{"rendered":"http:\/\/betanews.com\/?p=139632"},"modified":"2013-03-28T08:21:07","modified_gmt":"2013-03-28T12:21:07","slug":"sysinternals-updates-autoruns-and-process-monitor","status":"publish","type":"post","link":"https:\/\/mereja.media\/index\/649309","title":{"rendered":"Sysinternals updates Autoruns and Process Monitor"},"content":{"rendered":"

\"\"Sysinternals has announced updates for Autoruns<\/a> and Process Monitor<\/a>, as well as the release of a new command line tool, Registry Usage<\/a>.<\/p>\n

The Autoruns tweaks are the most significant. In particular, all reports now include a timestamp for executable files, folders or Registry keys. And so if you browse to HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run in the Everything view, say, you\u2019ll now see a timestamp which tells you when that Registry key was last modified.<\/p>\n

Of course, while this is a welcome addition, it does highlight one current failing of the program: you can\u2019t simply click a column header to sort entries by date (or any other field). Perhaps that will be next.<\/p>\n

Elsewhere, Process Monitor gains support for Windows 8 file information query types, as well as having a minor bug fix in its tooltip handling.<\/p>\n

And the new Registry Usage (RU.exe) is a simple command line tool which give you details on the size, value and subkey counts of a specified Registry key.<\/p>\n

\"\"To try the program out, just open a command line at the folder where it\u2019s located, and launch it with a suitable path (short and long forms are supported: “ru hkey_current_user” or “ru hkcu”,<\/strong> for example). After a pause you\u2019ll see a report listing the number of values and keys within that path, and their total size in bytes.<\/p>\n

Other options allow you to itemize subkeys, as well as control the number of levels the program will browse, as well as exporting the details as CSV for easy reference and analysis later.<\/p>\n

And, as usual, launching Registry Usage<\/a> without any command line switches will display information on the program\u2019s various options.<\/p>\n

Photo Credit:<\/strong> andrea michele piacquadio<\/a>\/Shutterstock<\/a><\/p>\n

\n<\/img><\/a> <\/img><\/a>\n<\/div>\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

Sysinternals has announced updates for Autoruns and Process Monitor, as well as the release of a new command line tool, Registry Usage. The Autoruns tweaks are the most significant. In particular, all reports now include a timestamp for executable files, folders or Registry keys. And so if you browse to HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run in the Everything view, […]<\/p>\n","protected":false},"author":7429,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-649309","post","type-post","status-publish","format-standard","hentry","category-news"],"_links":{"self":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/649309","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/users\/7429"}],"replies":[{"embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/comments?post=649309"}],"version-history":[{"count":0,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/posts\/649309\/revisions"}],"wp:attachment":[{"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/media?parent=649309"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/categories?post=649309"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mereja.media\/index\/wp-json\/wp\/v2\/tags?post=649309"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}