The Systinternals utilities, originally created by Mark Russinovich, see updates quite a lot. Some are modified to provide additional features, some tweaked to fix bugs, and then other times, major upgrades are released.

Four different Systinternals utilities were updated late last week: AccessChk, Procdump, RAMMap, and Strings. Of those released, Procdump version 6.0 is a major upgrade.

Here's the releases and their descriptions:

  • AccessChk v5.11: AccessChk, a command line utility for dumping the effective permissions and security descriptors for files, registry keys, processes, tokens, object manager objects, now prefixes Windows 8 application container SIDs with the word “Package”, and includes several minor bug fixes.
  • Procdump v6.0: Procdump is an advanced utility for capturing process memory dumps based on a variety of triggers including CPU usage, memory usage, performance counter values, and exceptions. Version 6.0 is a major upgrade that adds the ability to specify multiple filters, attach to a process by service name, and display/filter on the message text of a CLR or JScript exception.
  • RAMMap v1.22: RAMMap is a graphic utility that shows the breakdown of physical memory usage across different dimensions. This release fixes a bug that could cause a crash when accessing the cached files page when a cached file’s name exceeded a certain length.
  • Strings v2.51: This update to Strings, a command-line utility that prints a file’s embedded Unicode and ASCII strings, fixes a signed file offset printing bug.

The main Sysinternals page is located here: Windows Sysinternals