This post has been republished via RSS; it originally appeared at: New blog articles in Microsoft Tech Community.
This major update to Sysmon, an advanced host monitoring tool, adds a new event type, FileBlockExecutable that prevents processes from creating executable files in specified locations. It also includes several performance improvements and bug fixes.
AccessEnum, a tool for enumerating file system and registry permissions, now supports paths longer than MAX_PATH characters.
This update to Coreinfo, a utility that reports system CPU, memory and cache topology and information, now handles NUMA nodes with more than 64 processors.