🛠️ Misc Tools
- msconfig
System configuration Wikipedia Overview - Task Manager
System performance and process viewer Task Manager Info - schtasks /query
View scheduled tasks Microsoft Docs - Services Manager
Manage system services Windows Services Info - Event Viewer
View system logs Event Viewer Docs - LogParser
Microsoft tool that lets you query Event Logs, IIS logs, etc. LogParser
System configuration Wikipedia Overview
System performance and process viewer Task Manager Info
View scheduled tasks Microsoft Docs
Manage system services Windows Services Info
View system logs Event Viewer Docs
Microsoft tool that lets you query Event Logs, IIS logs, etc. LogParser
🔧 System Tools
- CPU-Z
Identifies CPU, motherboard, RAM, and system specs CPU-Z - GPU-Z
Identifies and reports on GPU information and specs GPU-Z - HWiNFO
Comprehensive hardware analysis, monitoring, and reporting tool HWiNFO - HWMonitor
Lightweight system monitoring program for temps, voltages, and fans HWMonitor
🖧 Network Tools
- netstat -abno
View active network connections Microsoft Docs - TCPView
Network connections viewer TCPView Download - Wireshark
Network packet analyzer Wireshark - arp -a
Show ARP cache Microsoft Docs - Angry IP Scanner
Fast IP address/network scanner Angry IP - Nmap
The gold standard for port scanning and host discovery Nmap - Fing
Easy GUI-based LAN scanner, also available for PC/OSX/Android/iOS Fing - Shodan (CLI/GUI)
Search devices exposed to the internet (good for IP intel + reconnaissance) Shodan
🔍 Process, Service, & Startup Analysis
- tasklist
View running processes Microsoft Docs - Get-Process (PowerShell)
View local processes PowerShell Docs - Sysinternals Suite
Advanced system diagnostics Sysinternals - Process Explorer
Detailed process info Download - Process Monitor
File, registry, and process monitoring Download - Autoruns
Autostart item analyzer Download
🧱 Security Monitoring / IDS
- pfirewall.log
Windows firewall logging Microsoft Docs - Suricata
IDS/IPS engine Suricata - Zeek
Network security monitor Zeek - CrowdInspect
Lightweight tool to check all running processes for VirusTotal scores and network connections CrowdInspect - KAPE (Kroll Artifact Parser and Extractor)
Deeper forensic investigations KAPE
🦠 Malware & Threat Analysis
- Windows Defender Offline Scan Full system scan Learn More
- Malwarebytes Malware scanner Malwarebytes
- ESET AV software ESET
- Sophos AV software Sophos
- HitmanPro Secondary malware scanner HitmanPro
🌍 Reputation & IP Intelligence
- Whois
Domain/IP ownership lookup Whois - VirusTotal
Multi-engine malware scan VirusTotal - AbuseIPDB
Report & search malicious IPs AbuseIPDB
💾 ISO, IMG, VHD, USB, etc.
- Disk2VHD
Disk to VHD disk image conversion utility Disk2VHD - ImageUSB
USB disk imaging utility for imaging specifically USB drives ImageUSB
No comments:
Post a Comment