TCPView, the Sysinternal tool that will show you a detailed listing of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections. Not like many other Sysinternal tools that are command lines, TCPView has a GUI that provides more informative data than what Netstate provides.
For each of the processes listed in the tool, you can right-click on it to find out the properties of that process and to kill or disconnect that process as well.
The latest release adds a number of features like flexible filtering, searching, and shows the Windows service that owns an endpoint. Not to mention that it also now has a new theme with dark mode.
PsExec, my favorite tool of all Sysinternal tool, also got an update that mitigates named pipe squatting attacks that can be leveraged by an attacker to intercept credentials or elevate to System privilege.
For a very long time, I wasn’t able to run the PsExec tool on my work computer that has Sophos AntiVirus installed. It’s always caught as a threat by the program for whatever reason that didn’t really make sense to me. However, it’s no longer the case with the latest release.
Because of that, I will be more than happy to use it again.
