In a recent LinkedIn post, Mark Russinovich announced a significant update to the Sysinternals suite, detailing a substantial release that includes new tools and enhancements across Windows, Linux, and macOS platforms. This latest drop, described by Russinovich as one of their largest in a while, focuses on expanding diagnostic capabilities and improving user experience for developers and system administrators.
A key highlight of the update, as detailed by Russinovich, is the introduction of a new tool specifically for macOS users. He notes:
“New for macOS: listent— a command-line tool for discovering and listing code-signing entitlements, with both static scanning and real-time monitoring options.”
This new macOS tool, listent, aims to provide developers with greater visibility into code-signing entitlements, a critical aspect of application security and deployment on Apple’s operating system. The inclusion of both static scanning and real-time monitoring suggests a comprehensive approach to analyzing these crucial security elements.
Enhancements Across the Sysinternals Suite
Beyond the new macOS offering, Russinovich detailed several key updates to existing, widely-used Sysinternals tools. These enhancements aim to boost performance, expand functionality, and improve usability.
ZoomIt and DebugView Updates
The popular presentation utility ZoomIt receives several notable upgrades. According to Russinovich, these include:
- Panorama screenshot support
- Text extraction from the screen
- Lock-screen display mode for the break timer
- Video clip editor for existing .mp4 and .gif files
Simultaneously, DebugView, a tool for monitoring debug output, gets a modernized user interface. Russinovich highlights:
“DebugView: a modernized UI (including dark theme), improved Windows 11 support, plus performance work.”
The addition of a dark theme and improved Windows 11 compatibility addresses user requests and modern UI expectations, while performance work ensures the tool remains efficient.
System Monitoring and Diagnostics Improvements
Performance and reliability are also central themes in the updates to Sysmon and NotMyFault. Russinovich points out that Sysmon has seen improvements in resilience:
“Sysmon: improved resilience under heavy load with better internal queue handling to reduce dropped events.”
This enhancement is crucial for security monitoring in high-traffic environments, ensuring that critical event data is not lost. Furthermore, NotMyFault, a tool for testing system stability and crash recovery, expands its diagnostic capabilities.
As Mark Russinovich explains, NotMyFault now offers:
- Expanded crash-trigger coverage (secure kernel and hypervisor) for deeper system diagnostics scenarios.
This expansion allows for more thorough testing of the system’s behavior under extreme conditions, including interactions with the secure kernel and hypervisor.
UX and Platform Refinements
User experience (UX) and cross-platform consistency are also addressed. RAMMap, a utility for analyzing physical memory usage, receives better UX feedback during save and load operations, making its use more intuitive. For Linux users, Procmon for Linux sees a dependency refresh, ensuring its continued compatibility and functionality on Linux systems.
The comprehensive nature of this Sysinternals update, as presented by Mark Russinovich on LinkedIn, underscores the ongoing commitment to providing powerful, free tools for system analysis and troubleshooting across multiple operating systems.
📝 About This Content
This article is based on insights shared by Mark Russinovich on LinkedIn.
📅 Originally posted on March 27, 2026 | View original post on LinkedIn →