Create SysInternals Content

[jgstew]

Many SysInternals tools can be downloaded directly from: https://live.sysinternals.com/

Completed:

• Create Content for SysInternals Autoruns: https://github.com/jgstew/bigfix-content/issues/10
• Create content for SysInternals sigcheck certs: https://github.com/jgstew/bigfix-content/issues/9

Candidates:

• https://docs.microsoft.com/en-us/sysinternals/downloads/rootkit-revealer
• https://docs.microsoft.com/en-us/sysinternals/downloads/pipelist
• https://docs.microsoft.com/en-us/sysinternals/downloads/psfile
• https://docs.microsoft.com/en-us/sysinternals/downloads/listdlls
• https://docs.microsoft.com/en-us/sysinternals/downloads/psloggedon
• https://docs.microsoft.com/en-us/sysinternals/downloads/tcpview
• https://docs.microsoft.com/en-us/sysinternals/downloads/psping
• https://docs.microsoft.com/en-us/sysinternals/downloads/psshutdown
• https://docs.microsoft.com/en-us/sysinternals/downloads/movefile
• https://docs.microsoft.com/en-us/sysinternals/downloads/ntfsinfo
• https://docs.microsoft.com/en-us/sysinternals/downloads/sync
• https://docs.microsoft.com/en-us/sysinternals/downloads/procdump
• https://docs.microsoft.com/en-us/sysinternals/downloads/regjump
  • this would be useful in demos to open directly to uninstall keys
• https://docs.microsoft.com/en-us/sysinternals/downloads/strings
  • useful to find undocumented strings in binary files
• https://docs.microsoft.com/en-us/sysinternals/downloads/zoomit
  • I might want to use this for presentations, the windows built in one is annoying.
• SigCheck but for EXEs: https://docs.microsoft.com/en-us/sysinternals/downloads/sigcheck
  • Very Slow, took 3 hours on my Windows Folder