[Segurança] Ferramentas essenciais - free

A SysInternals disponibiliza, gratuitamente, um conjunto grande de ferramentas para o ambiente windows:

http://www.sysinternals.com/Utilities.html

São ferramentas muito simples e ao mesmo tempo poderosas e extremamente úteis para os profissionais de TI, pois permitem acesso e monitoração de vários recursos do Windows.

Entre elas, destaco:

• Filemon v7.0: This monitoring tool lets you see all file system activity in real-time.
  
• PsTools v2.16: The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more.
  
• TDIMon v1.01: TCP/IP monitor.
  
• TCPView v2.4: See all open TCP and UDP endpoints. On Windows NT, 2000 and XP TCPView even displays the name of the process that owns each endpoint. Includes a command-line version, tcpvcon. (meu preferido - vide figura abaixo)
  
• Filemon v7.0: This monitoring tool lets you see all file system activity in real-time.
  
• Process Explorer v9.12: Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process.