Build v0.4

New release featuring many new usability improvements

[0.4] - 2019-07-15

Added

• gpu usage statistics
• option to reset graph
• pause refresh + refresh now
• add option to fully refresh all services
• added option to inject a dll into any running process
• use profile directory to save settings
• option to customize graph bars from the graph bar context menu
• graph now have tool tips with detailed informations
• settings dialog with options and the ability to customize list colors

Changed

• now distributing as an installer usinf https://github.com/DavidXanatos/uSetup, with the option to extract for portable mode.
• made most dialogs resizable
• select reasonable default columns

Fixed

• a 32 bit version can not longer be started on a 64-bit system as it would not work correctly, however it tries to start a 64 bit version if avilable.
• fixed process service tab not working

Build v0.3

[0.3] - 2019-07-09

Added

• tokens tab with advanced infos
• improved handle window
  -- show job info window
  -- show token info window
  -- show task info window
  -- open file lokation
  -- open registry key
  -- read/write section memory
  -- type filter now enumerates all types
• added size info to section type handle

Changed

• rewoked sid to username resolution now using a worker thread to improve performance
• CWinProcess does nto longer handle sid_user/token informations all is doem by CWinToken instead

Fixed

• fixed issue with the first graph text not being displayed
• fixed an issue causing the client to wait for 10 sec on shutdown

Build v0.2

[0.2] - 2019-07-05

Added

• memory tab, with options to dump the memory, free it or change access permissions
• advanced memory editor window
  -- forked qhexedit2 https://github.com/DavidXanatos/qhexedit to ad missing functionality, edit, lock mode, etc...
  -- added a QHexEditor class to qhexedit implementing a generic hex editor dialog with options and search capability

Changed

• I/O stats does not longer show ETW values when the is not monitoring ETW events

Fixed

• fixed Uptime column not being refreshed

Build v0.1

Version 0.1 is ready

A productive release is finally here, there are still many features to go, but the tool as is, can be considered ready for every day use.

ChangeLog:

[0.1.0] - 2019-06-30

Added

• service property window, including all pages form the extended services plugin
• cpu and memory usage in tray icon
• option to start elevanted without an UAC prompt
• auto run using windows registry
• build x86 binaries
• add option to create a process dump
• afility to run a program with the tocken of an other program (run as this user)
• services tab showing services hosted by the selcted process
• add go to service key
• type filter to handles
• added missing handle actions
• add window properties details area

Changed

• paged memory usage is now extracted form pagefile informtions
• monitoring of ETW events can be disabled and re enabled in tool menu
• handle property detail are no a tree widget

Fixed

• crash when querying samba datarate and getting null
• run as feature forks now
• fixed issue with CoInitialize

Preview build v0.0.9

known issues:

• run as feature does not work

[0.0.9] - 2019-06-24

Added

• general system tab
• process and system stats
• job tab
• add process pid picker dialog
• add ras/vpn graph
• process and threads are listed for 5 sec after termination
• grid to all lists
• service column to process tree
• list colloring
• context menu to services view
• tools menu
• scm permissions
• processor affinity dialog
• organized columns menu for the process tree in sub menus
• added option to restart elevated
• added graphs to process tree, CPU, Memory, IO/DiskIO, Network
• linux style cpu usage i.e. 1 core = 100% so > 1 core -> > 100%
• create service dialog
• taskexplorer can now be started as service and listen for commands
• option to start programs as TrustedInstaller without using a service
• run as dialog

Changed

• graphs can now be resized with a splitter
• improved process tree sorting behavioure to be more like in process hacker
• samba stats now using NetStatisticsGet instead of speculating on ETW events
• improved global network traffic logging now using GetIfTable2 instead of ETW events
• improved MMapIO display now it works as expected and disk IO got its own graph
• all files list now works for non enevated users
• driver tab now uses NtQuerySystemInformation(SystemModuleInformation to enumerate drivers

Fixed

• memory leak when running without unelevated and vieving all files list

check summs:

md5: 334f871c6ab83f027c2a7e89cbb8c5c5
sha1: fd19d01b83e58c17846c30a811df04060ac226a9
sha256: cb08fbd000cf91e650588055f09bb8f86da388ba0b4347ac4dc40b2988d18e4f

Preview build v0.0.8

A much more complete pre release, working sub menus, some panels are still missing but its a much more complete expirience overall, windoe position and columns are remembered between restarts, etc....

[0.0.8] - 2019-06-17

Added

• window graph
• window column in process tree
• adde dtreee to window tab
• environment vartiable view
• context menu to environment vartiable
• all thread model columns
• all process model columns
• context menu to sockets view
• context menu to handles view
• context menu to modules view
• CAbstractTask Class to abstract threads and processes
• linked split tree selection
• context menu to threads view
• context menu to process tree
• double click on a process opens the Info panel in a new window
• context menu to windows view
• permissions dialog to threads processes and handles
• saving window position spliter positions column selection and more
• added sys tray icon
• general task tab

Changed

Fixed

• failed to remove old modules
• fixed windows tree not opening

Preview build v0.0.7

Preview release of TaskExplorer v0.0.7
a lot of stuff is still missing, no sub menus, menus not working and empty panels.

but even more stuff is already working:

Added

• Global and per process Listing of open sockets/connections
• Thread list / Stack trace
• added All Files view
• module view
• service list
• driver list
• added network stats
• added disk stats
• added CPU Usage graph
• added Memory Usage graph
• added FileIO and DIskIO graph
• added Network graph
• added Samba graph
• added GUI/USER Object graph
• added Handles graph

Changed

• reworked the process tree handling for better performance
• added abstract tree model
• added abstract list model

Fixed

• endpoint swap of incomming udp packets
• fixed memory leak during all files enumeration