jpolisher's IT-wiki

User Tools

Site Tools

Trace:
sysinternals

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
sysinternals [2022/09/30 08:55] – jpsysinternals [2022/10/31 16:09] (current) – jp
Line 8: Line 8:
 Или с ключем -c, чтобы записать в CSV-формате Или с ключем -c, чтобы записать в CSV-формате
    .\autorunsc64.exe -a * -c -o c:\autors.txt    .\autorunsc64.exe -a * -c -o c:\autors.txt
 +
 +----
 +
 ==== PsExec ==== ==== PsExec ====
  
Line 13: Line 16:
  
    .\PsExec64.exe \\COMPUTER_NAME -i -s powershell.exe    .\PsExec64.exe \\COMPUTER_NAME -i -s powershell.exe
 +
 +----
 +
 +=== Handle64 ===
 +
 +Узнать какой процесс (PID) открыл файл:
 +
 +   .\handle64.exe c:\file_path\file.txt
 {{tag>Microsoft Windows SysInternals}} {{tag>Microsoft Windows SysInternals}}
 +
sysinternals.1664528133.txt.gz · Last modified: 2022/09/30 08:55 by jp