Mark Russinovich Unveils New Sysinternals Tools and Updates

M

Mark Russinovich

LinkedIn Author

CTO, Deputy CISO and Technical Fellow, Microsoft Azure

In a recent LinkedIn post, Mark Russinovich, a prominent figure in Windows internals, announced the release of several significant updates to the Sysinternals suite of tools, alongside the introduction of a new utility. This announcement highlights ongoing efforts to provide system administrators and power users with advanced diagnostic and troubleshooting capabilities.

CoreInfo Gets a Graphical Upgrade

A key highlight of the announcement is the introduction of a graphical user interface (GUI) counterpart to the existing CoreInfo command-line utility. CoreInfo has long been a valuable tool for understanding the intricate details of a system’s processor and cache topology. As Mark Russinovich notes in his post:

“CoreInfo, a command-line utility that reports CPU, NUMA, and cache topology along with processor features, now has a GUI counterpart that makes it easier to view processor, socket, and NUMA information and relationships.”

This GUI enhancement, according to Russinovich, aims to simplify the process of visualizing complex hardware relationships, making it more accessible to a wider range of users. The tool provides insights into how processors are interconnected, the Non-Uniform Memory Access (NUMA) node configurations, and the hierarchy of CPU caches, all crucial for performance tuning and in-depth system analysis.

Notmyfault and Process Explorer Enhancements

Beyond the new GUI for CoreInfo, Russinovich also detailed updates to two other essential Sysinternals tools: Notmyfault and Process Explorer.

Notmyfault: Triggering System Resets

The Notmyfault tool, designed for fault-injection testing, has been updated to include the capability to trigger a specific type of system bugcheck. Russinovich states:

“We also released a new version of Notmyfault that can generate a HalTimerWatchdogTriggerSystemReset bugcheck…”

This new functionality allows developers and testers to simulate a critical system failure scenario, specifically related to the hardware abstraction layer’s timer watchdog. This is invaluable for testing system stability and recovery mechanisms under adverse conditions.

Process Explorer: .NET Assembly Visibility

Process Explorer, a staple for monitoring running processes, has also received an update. According to Mark Russinovich, the latest version now offers enhanced visibility into a process’s loaded .NET assemblies:

“…and a Process Explorer update that shows the .NET assemblies a process has loaded.”

This addition is particularly beneficial for developers working with .NET applications, enabling them to quickly identify which .NET components are being utilized by a specific process. This can aid in debugging, performance analysis, and understanding application dependencies.

Continued Commitment to Sysinternals

The release signifies Mark Russinovich’s continued dedication to maintaining and improving the Sysinternals suite, a collection of tools that have become indispensable for IT professionals worldwide. The focus on both command-line power and user-friendly graphical interfaces demonstrates a commitment to catering to diverse user needs and skill levels. These updates underscore the importance of robust diagnostic tools in managing and troubleshooting modern complex operating systems and applications.

📝 About This Content

This article is based on insights shared by Mark Russinovich on LinkedIn.

📅 Originally posted on December 17, 2025 | View original post on LinkedIn →