SysInternals Utilities. Following is a brief listing of the files and utilities provided on this CD. To access the command-line versions, please open the Command Prompt and if necessary, change t othe \programs\sysinttools folder... AccessEnum.exe This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions AUTOLOG.EXE Automatically Log on (Windows 2000 and XP) Configure WinNT/2K auto-logon properties autoruns.exe See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings ctrl2cap.exe This is a kernel-mode driver that demonstrates keyboard input filtering just above the keyboard class driver in order to turn caps-locks into control keys. Filtering at this level allows conversion and hiding of keys before NT even "sees" them. Full source is included. Ctrl2cap also shows how to use NtDisplayString() to print messages to the initialization blue-screen. DISKMON.EXE This utility captures all hard disk activity or acts like a software disk activity light in your system tray. EFSDUMP.EXE Dump information about Win2K encrypted files Filemon.exe This monitoring tool lets you see all file system activity in real-time. It works on all versions of WinNT/2K/XP, Windows 9x/Me, Windows XP 64-bit Edition, and Linux. handle.exe This handy command-line utility will show you what files are open by which processes, and much more. listdlls.exe List all the DLLs that are currently loaded, including where they are loaded and their version numbers. Version 2.0 prints the full path names of loaded modules. newsid.exe Learn about the computer SID problem everybody has been talking about and get a free computer SID changer, NewSID, complete with full source code. NTFSINFO.EXE Use NTFSInfo to see detailed information about NTFS volumes, including the size and location of the Master File Table (MFT) and MFT-zone, as well as the sizes of the NTFS meta-data files. pagedfrg.exe Defragment your paging files and Registry hives! PORTMON.EXE Monitor serial and parallel port activity with this advanced monitoring tool. It knows about all standard serial and parallel IOCTLs and even shows you a portion of the data being sent and received. Version 3.x has powerful new UI enhancements and advanced filtering capabilities. procexp.exe psexec.exe psfile.exe psgetsid.exe Psinfo.exe pskill.exe pslist.exe psloggedon.exe psloglist.exe pspasswd.exe psservice.exe psshutdown.exe pssuspend.exe Regmon.exe This monitoring tool lets you see all Registry activity in real-time. It works on all versions of WinNT/2K, Windows 9x/Me and Windows 64-bit. sdelete.exe Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program. Complete source code is included. ShareEnum.exe sync.exe Force NT to flush all modified file system data to disk, insuring that it will be safe in the face of a crash. Tcpview.exe See all open TCP and UDP endpoints. On Windows NT, 2000 and XP TCPView even displays the name of the process that owns each endpoint. Full source to the command-line version of this tool, netstatp, is included. TDIMON.EXE See TCP and UDP activity in real-time with this advanced network API monitoring tool.