It can also help verify code signatures, to ensure entries are digitally signed by their vendor and submit questionable entries to Virus Total, a Web application service that hosts more than 60 antivirus engines.

'The pink items are potentially suspicious,' he explained. By default, it hides anything that is part of Windows or comes from Microsoft, to expedite troubleshooting. 'These valuable, lightweight tools that aren't available anywhere else,' Margosis said.ĭuring his presentation, Margosis shared how to use Autoruns to check out some startup scripts. He has also collaborated with Microsoft's Mark Russinovich on the recently updated book Troubleshooting with the Windows Sysinternals Tools, 2nd Edition (Microsoft Press).ĭuring Margosis' presentation at this week's annual TechMentor conference in Redmond, Wash., titled 'The Sysinternals Tools Can Make You Better at Your Job,' he gave a deep dive into several of the more popular tools, including autoruns, process monitor and desktop. In addition to working with key customers on various security issues, Margosis focuses on his core expertise of Windows security, least privilege, app compatibility and configuring locked-down environment, according to his bio. Aaron Margosis ( a self-described 'Windows nerd' and an 18-year Microsoft veteran who is now a principal consultant for the company's Global Cybersecurity Practice, is one of the leading experts when it comes to Sysinternals, a set of free Windows management utility tools.

Microsoft sysinternals tools