System Administration Tools Journal

The tools used in the lab were:

• PsInfo: Used to show the information on a local system such as the kernel build, amount of physical memory and the date the system was installed.

• PsList: Shows all current processes that are actively running in windows

• Disk Utility(du): Used to check the usage of a specified disk.

• Hex2dec: Converts hexadecimal numbers to decimal numbers.

• Movefile: Schedule a file to be moved from one place to another upon reboot.

• Sigcheck: Hashes a file and then uses that hash to determine if a file is a virus based off of an online database located at virustotal.com.

Extra tools explored during the lab:

• DiskView: Creates an image that allows the user to see a file’s location or what file is in a particular cluster.

• Testlimit: Used to stress test computers by simulating low resources such as memory and threads

• Sysmon: Used to monitor system activity, even when the device is rebooted.

• Sync: Forces the os to put all of the file system data onto the disk to prevent the loss of information in the event of a system failure.

• Streams: Allows a file to create alternate paths, or streams, of data.

• Sdelete: Can be used to delete files, directories and clean disk space.

• RegDelNull: Allows the deletion of registry keys that would not be deletable because they contain embedded null characters.

• PsPasswd: Allows the password to be changed on both local and remote systems.

• Ntfsinfo: Provides the user with information about NTFS volumes.

• Junction: creates files or directories that actually lead to a different point.