Cover -- Contents -- Foreword -- Chapter 1: Recovering Your Computer with ERD Commander 2005 -- Introduction -- Utilizing ERD Commander 2005 -- Booting a Dead System -- Being the Locksmith -- Accessing Restore Points -- Removing Hotfixes -- Chapter 2: Examining Your Computer -- Introduction -- Exploring Process Activity with Process Explorer -- Viewing and Controlling Process Activity Using Process Explorer -- The Dynamic Duo: Using Autoruns and Process Explorer Together to Troubleshoot Startups and Combat Malware -- Chapter 3: Checking the Security of Your Computer -- Introduction -- Viewing the Security Settings of Your Resources (AccessEnum) -- Listing the Users with Access to Encrypted Files (EFSDump) -- Moving/Deleting Files in Use on Reboot (PendMoves, MoveFile) -- Viewing Shared Resources and Their Access Permissions (ShareEnum) -- Investigating Suspicious Local Files (Sigcheck) -- Searching for Installed Rootkits (RootkitRevealer) -- Chapter 4: Computer Monitoring -- Introduction -- Viewing Users Who Are Logged On and What They're Doing -- Finding Open Resources and the Processes That Are Accessing Them -- Viewing All File Activity with Filemon -- Viewing All Registry Activity with Regmon -- Chapter 5: Disk Management -- Introduction -- Managing Disk Fragmentation (Defrag Manager, PageDefrag, Contig, DiskView) -- Getting Extended File/Disk Information (DiskExt, DiskView, NTFSInfo, LDMDump) -- Disk Volume Management (NTFSInfo, VolumeID, LDMDump) -- Managing Disk Utilization (Du, DiskView) -- Chapter 6: Recovering Lost Data -- Introduction -- Recovering Data Across a Network (Remote Recover) -- Recovering Files (FileRestore) -- Advanced Data Recovery and Centralized Recovery (Recovery Manager) -- Restoring Lost Active Directory Data (AdRestore) -- Chapter 7: System Troubleshooting -- Introduction.

Making Sense of a Windows Crash (Crash Analyzer Wizard) -- Identifying Errant Drivers (LoadOrder) -- Detecting Problematic File and Registry Accesses (FileMon, Regmon) -- Analyzing Running Processes (PsTools) -- Putting It All Together (FileMon, RegMon, PsTools) -- Chapter 8: Network Troubleshooting -- Introduction -- Monitoring Active Network Connections (TCPView, Tcpvcon, TCPView Pro) -- Performing DNS and Reverse DNS Lookups (Hostname) -- Getting Public Domain Information (Whois) -- Identifying Problematic Network Applications (TDIMon, TCPView Pro) -- Chapter 9: Tools for Programmers -- Introduction -- Implementing a Trace Feature (DebugView) -- Identifying I/O Bottlenecks (Filemon, Regmon, Tokenmon, Process Explorer) -- Analyzing Applications (Process Explorer, Strings) -- Debugging Windows (LiveKd) -- Tracking Application Configuration Problems (Process Explorer, Tokenmon) -- Chapter 10: Working with the Source Code -- Introduction -- Overview of the Source -- Compiling the Source -- Sample Derivative Utilities -- License Uses -- Chapter 11: NT 4.0-Only Tools -- Introduction -- Optimizing an NT 4.0 System (CacheSet, Contig, PMon, Frob) -- Recovering Data (NTRecover) -- Accessing a Windows NT 4.0 NTFS Volume from a FAT File System Volume -- Diagnosing a Windows 2000 NTFS Volume from Windows NT 4.0 (NTFSCHK) -- Chapter 12: Having Fun with Sysinternals -- Introduction -- Generating a Blue Screen of Death on Purpose (BlueScreen) -- Modifying the Behavior of the Keyboard (Ctrl2cap) -- Creating Useful Desktop Backgrounds (BgInfo) -- Bypassing the Login Screen (Autologon) -- Index.