The Sysinternals Suite is a comprehensive package of advanced Windows utilities created by Mark Russinovich, who launched the Sysinternals website in 1996 to share his system tools and technical resources.
This suite combines a wide range of troubleshooting and diagnostic tools, including Process Explorer, Process Monitor, Sysmon, Autoruns, ProcDump, the PsTools collection, and many others. It provides everything IT professionals and developers need to manage, monitor, and troubleshoot Windows systems and applications.
The Suite bundles all of the core troubleshooting utilities along with their help files. Non-troubleshooting extras—such as the BSOD Screen Saver or NotMyFault—are excluded. In addition to the well-known tools, it also includes AccessChk, Autologon, Ctrl2Cap, DiskView, Disk Usage (DU), LogonSessions, PageDefrag, PsLogList, PsPasswd, RegMon, RootkitRevealer, TCPView, VMMap, ZoomIt, and more.
Sysinternals Suite 2026.07.05 changelog:
- Autoruns v14.2 - This update to Autoruns, a utility for monitoring startup items, adds support for Windows packaged apps.
- ProcDump v12.0 - This update to ProcDump, a command-line utility for generating memory dumps from running processes, adds process tree support with -pt.
- ZoomIt v12.0 - ZoomIt, a screen magnification and annotation tool, brings webcam overlay support for video captures and allows appending clips in the video trim editor.
- DebugView v5.01 - This update to DebugView, a tool for displaying both kernel-mode and Win32 debug output, reinstates Windows 10 support, enables highlighting on PID, and fixes a series of bugs.
- NotMyFault v4.5 - This update to NotMyFault, a tool that can crash, hang, and cause kernel memory leaks on the Windows system, adds a new type of crash for Level-0 Hyper-V virtualized machines, and adds a SecureKernel crash.
- Process Explorer v17.12 - This update to Process Explorer, an advanced process, DLL, and handle viewing utility, adds a "parent PID" column to the main view and fixes a crash on exit.
- Process Monitor v4.02 - This update to Process Monitor, a utility for observing real-time file system, Registry, and process or thread activity, adds Ctrl + PgUp/PgDn for longer scrolling (10 page) in the main list view, shows milliseconds for the times in the Process Tree dialog, and fixes a series of API mismatches.
Linux tools
Sysinternals EBPF, Sysmon for Linux, Procmon for Linux, ProcDump for Linux, jcd (on Linux), have been updated with support for RHEL10, Debian 13, and Fedora 43.
- Sysmon 1.5.2 for Linux
- Procmon 2.2.1 for Linux
- ProcDump 3.5.1 for Linux
- jcd 1.0.2
Download: Sysinternals Suite 2026.07.05 | 168.0 MB (Freeware)
Download: Sysinternals Suite for ARM64 | 15.4 MB
Link: Sysinternals Suite Home Page | Screenshot
