However, it’s no longer the case with the latest release.īecause of that, I will be more than happy to use it again.

It’s always caught as a threat by the program for whatever reason that didn’t really make sense to me. From toolbar, you can save the list in TXT format, refresh the list, and let it display only the unconnected endpoints. The list will be populated with all the processes being run in the background. PsExec, my favorite tool of all Sysinternal tool, also got an update that mitigates named pipe squatting attacks that can be leveraged by an attacker to intercept credentials or elevate to System privilege.įor a very long time, I wasn’t able to run the PsExec tool on my work computer that has Sophos AntiVirus installed. Just launch the application and it will start enumerating all TCP & UDP endpoints and resolving IP addresses of respective domain name versions. Not to mention that it also now has a new theme with dark mode. The latest release adds a number of features like flexible filtering, searching, and shows the Windows service that owns an endpoint. Not like many other Sysinternal tools that are command lines, TCPView has a GUI that provides more informative data than what Netstate provides.įor each of the processes listed in the tool, you can right-click on it to find out the properties of that process and to kill or disconnect that process as well. TCPView, the Sysinternal tool that will show you a detailed listing of all TCP and UDP endpoints on your system, including the local and remote addresses and state of TCP connections.

Bleepinmgcomputer tcpview endpoints