

You get Process Explorer, a supercharged version of Task Manager that shows you a huge amount of information about the programs running on your PC, what they're doing, and the resources they're consuming.


This includes Autoruns, for instance, still the most detailed way to view all the programs that are configured to launch when Windows and various system applications load. Download all ARM64 tools in a single download with the Sysinternals Suite for ARM64.The Sysinternals Suite collects all the Windows Sysinternals troubleshooting tools into a single file. These include: AdInsight v1.2, AutoLogon v3.1, Autoruns v13.98, ClockRes v2.1, DebugView v4.9, DiskExt v1.2, FindLinks v1.1, Handle v4.22, Hex2Dec v1.1, Junction v1.07, PendMoves v1.02, PipeList v1.02, Procdump v10.0, Process Explorer v16.32, RegDelNull v1.11, RU v1.2, Sigcheck v2.8, Streams v1.6, Sync v2.2, VMMap v3.26, WhoIs v1.21 and ZoomIt v4.52. In addition, several tools have been newly ported to and are now available for ARM64. This release of Procdump, a flexible tool for manual and trigger-based process dump generation, adds support for dump cancellation and CoreCLR processes. This update to Process Monitor, a utility that logs process file, network and registry activity, adds support for multiple filter item selection, as well as decoding for new file system control operations and error status codes. In addition to several bug fixes, this major update to Sysmon adds support for capturing clipboard operations to help incident responders retrieve attacker RDP file and command drops, including originating remote machine IP addresses. Personally I use only Process Explorer & RAMMAP on a (very) regular basis) (For me these tools are a bit too "geeky". (From: Windows Sysinternals - Windows Sysinternals)
