AllTools

https://github.com/zodiacon/alltools
Admin
AllTools is a comprehensive collection of stable Windows system utilities for process monitoring,...
Tokens:2,153
Snippets:35
Trust Score:10
License:MIT
Update:7 months ago
Show doc for...
Tokens:
Raw
### Visualize CPU Usage with QSlice and QSliceX

Source: https://context7.com/zodiacon/alltools/llms.txt

QSlice and QSliceX are modern implementations for visualizing CPU usage across processes, with QSliceX featuring real-time pie chart graphics for enhanced visual representation.

```bash
# Launch QSlice for CPU usage monitoring
unzip QSlice.zip
./QSlice.exe

# QSliceX adds pie chart visualization
unzip QSliceX.zip
./QSliceX.exe
```

--------------------------------

### Analyze PE Files with PEExplorer and PEExplorerV2

Source: https://context7.com/zodiacon/alltools/llms.txt

PEExplorer and PEExplorerV2 are viewers for Windows PE (Portable Executable) files, allowing analysis of headers, sections, imports, exports, and other structural components of executables, DLLs, and drivers.

```bash
# Analyze a PE file with PEExplorer
PEExplorerV2.exe

# Or use the original version
unzip PEExplorer.0.6.3.zip
./PEExplorer.exe

# View:
# - DOS/NT Headers
# - Section table
# - Import/Export directories
# - Resources
# - Debug information
```

--------------------------------

### Examine Executable Structures with Total PE

Source: https://context7.com/zodiacon/alltools/llms.txt

Total PE is an additional viewer for examining the structures of executable files, serving as a work-in-progress tool for PE file analysis.

```bash
# Launch Total PE viewer
TotalPE.exe

# Or extract from archive
unzip TotalPE.zip
./TotalPE.exe
```

--------------------------------

### Inspect .NET Processes and Dumps with CLR Explorer

Source: https://context7.com/zodiacon/alltools/llms.txt

CLR Explorer provides detailed information about .NET processes and allows analysis of .NET dump files, including insights into assemblies, AppDomains, and the managed heap.

```bash
# 32-bit version
CLRExplorer.exe

# 64-bit version
CLRExplorer64.exe

# Analyze:
# - Loaded assemblies and modules
# - AppDomain information
# - Managed threads
# - GC heap statistics
```

--------------------------------

### Explore Kernel Objects with Object Explorer (ObjExp)

Source: https://context7.com/zodiacon/alltools/llms.txt

ObjExp provides visibility into the Windows Object Manager namespace, allowing users to explore kernel objects and handles across the entire system.

```bash
# Launch Object Explorer
ObjExp.exe

# Browse object directories, view object properties,
# and examine handle tables for any process
```

--------------------------------

### System Explorer (SysExp) for System Overview

Source: https://context7.com/zodiacon/alltools/llms.txt

SysExp offers a comprehensive system information view, displaying processes, threads, handles, kernel objects, and other system-level data in a unified interface for detailed analysis.

```bash
# Launch System Explorer for complete system overview
SysExp.exe

# View process details including:
# - Thread information
# - Handle table
# - Memory regions
# - Loaded modules
```

--------------------------------

### Command-Line Object Manager Exploration with ObjDir

Source: https://context7.com/zodiacon/alltools/llms.txt

ObjDir is a command-line utility for navigating the Windows Object Manager namespace, displaying kernel objects organized within directory structures.

```bash
# List root object directory
ObjDir.exe

# Navigate object manager namespace:
# \Device - Device objects
# \Driver - Driver objects
# \BaseNamedObjects - Named synchronization objects
```

--------------------------------

### Monitor System Events with ProcMonX

Source: https://context7.com/zodiacon/alltools/llms.txt

ProcMonX is an ETW-based tool for real-time capture of system activity, including file system, registry, network, and process events. It serves as a powerful alternative for system monitoring.

```bash
# Launch ProcMonX to monitor system events
ProcMonX.exe

# ProcMonX v2 provides enhanced ETW-based monitoring
# Extract and run for the latest version
unzip ProcMonXv2.zip
./ProcMonX.exe
```

--------------------------------

### Kernel Object and Handle Statistics with Kernel Object View

Source: https://context7.com/zodiacon/alltools/llms.txt

Kernel Object View displays system-wide statistics for kernel objects and handles, including counts by type and per-process handle usage.

```bash
# Launch Kernel Object View
KernelObjectView.exe

# Displays:
# - Object type statistics
# - Handle counts per process
# - Object reference counts
```

--------------------------------

### Explore PDB Symbol Files with PdbView

Source: https://context7.com/zodiacon/alltools/llms.txt

PdbView allows users to view and explore PDB (Program Database) symbol files, which are essential for debugging Windows applications. It requires msdia140.dll and symsrv.dll.

```bash
# View PDB file contents
unzip PdbView.0.2.zip
./PdbView.exe

# Requires msdia140.dll and symsrv.dll (included)
# Browse symbols, types, and source file references
```

--------------------------------

### Perform Thread and CPU Stress Tests with CPUStress

Source: https://context7.com/zodiacon/alltools/llms.txt

CPUStress is designed for performance testing and thermal analysis, allowing users to create multiple threads with configurable activity levels, priorities, and CPU affinity.

```bash
# Launch CPU stress testing tool
CPUStress.exe

# Features:
# - Create multiple threads with configurable activity levels
# - Set thread priorities and CPU affinity
# - Monitor CPU utilization during stress tests
```

--------------------------------

### Monitor Kernel Pool Memory with PoolMonX

Source: https://context7.com/zodiacon/alltools/llms.txt

PoolMonX assists in monitoring kernel pool memory allocations and usage patterns, crucial for debugging memory leaks and analyzing kernel memory consumption.

```bash
# Launch Pool Monitor
PoolMonXv2.zip  # Extract and run
PoolMonX.exe

# Monitor pool tags, allocation sizes,
# and paged/non-paged pool usage
```
Tokens:
Raw