Patrick Matula

I'm ready for an Azure Internals book. #azure

Is there an MCP server yet that can load and use a WinDBG Time Travel Debugging (TTD) trace instead of a process dump?

Sysinternals - Sysinternals Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.

We're excited to release ProcExp v17.1, SDelete v2.06, and Sysmon 1.5.1 for Linux with bug fixes. Read the blog post for the complete list.
Get the tools at sysinternals.com.

See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...

Your Home for Microsoft Build | Microsoft Go deep on real code and real systems with the teams building and scaling AI at Microsoft Build, June 2–3, 2026, in San Francisco and online.

Microsoft Build

#thechapelbar #vienna

A quick google search brings up: github.com/JameZUK/Proc...

@mariohewardt.com is there something "official" like a "Sysinternals MCP"? Maybe a surprise for 2026? :D I guess procmon is the most important one.. but maybe also ProcExp, Autoruns,..?

Yeah..I totally see that! I guess it applies also for other analysis stuff like procmon. uploading some procmon logs and prompt smth like: "explorer right click context menu item X is not working. tell me why"
procmon analysis is very useful but it can take some time (at least for me).

I always see myself in handcuffs.

this seems very useful. I'm too dumb to use IDA or Ghidra - but something like this could be a door to a new world :)

I started a blog ✨

Beyond Breaking In — notes to the former me, to the future you.

Honest reflections on tech, growth, and the stuff nobody talks about enough. First post is live (with audio! 🎧)
👉🏿 beyondbreaking.in

Aspire Conf Save the Date poster - March 23, 9:00 PST. Learn how Aspire can transform the way you build and deploy your distributed apps and agents. Free, livestream event on YouTube & Twitch

📣 It's happening! 📣 Come meet the new Aspire at #AspireConf on March 23. Join our livestream at 9am PT for a packed day of sessions for all developers, no matter your skill, language, or stack.

Save the date: aspire.dev/aspireconf?c...

#Python #TypeScript #JavaScript #dotnet #AI #AspireDev

Azure Front Door - RestrictedIP
blog.patrickmatula.com/posts/azuref...

Obsidian 1.12.0 (early access) is now available to Catalyst members for desktop and mobile.

- Obsidian CLI
- Bases search
- Images can now be resized in Live Preview
- When deleting a file, linked images can now be automatically deleted with it

Sysinternals - Sysinternals Library, learning resources, downloads, support, and community. Evaluate and find out how to install, deploy, and maintain Windows with Sysinternals utilities.

We're excited to release ZoomIt with a video trim editor, Sysmon for Linux with EBPF events, and DebugView, RAMMap, RDCMan with bug fixes!
Get the tools at sysinternals.com.

See what's new on the Sysinternals Blog: techcommunity.microsoft.com/blog/sysinte...

Yeah, no idea what the exact issue is, but I have seen a few cases where the connection worked fine with the Remote Desktop MSI and failed with the Windows App :(

Absolutely .. also because the Remote Desktop MSI seems more stable than the Windows App. Recent issue: learn.microsoft.com/de-de/window... - affects only the Windows App and not the Remote Desktop app (at least in my case).

The updates for three different versions contain the same information about what has changed.

Remote Desktop client (MSI) release notes. There is room for improvement. When writing release notes, please don’t copy and paste generic information.
We want to know what has changed. #azure #remotedesktop #msi

Of course, I can research the proper update and check it if it's a B or D update... but imho it's not a smooth experience.

My workflow is the following:
1. I hit a bug
2. KB123456 fixes the bug
3. Unfortunately, it's a Out-of-Band patch
4. I want to configure an expedite policy but there is no hint regarding the kb article

Maybe my workflow is wrong.

The Intune Expedite policy is a cool feature, but how are we supposed to know the mapping between a KB article and its description in Intune? #intune

It's the dialog style in Windows you might get if you try to put a server path into the Run dialog that it can't find. The image depicts copying the error message from the dialog and pasting it into notepad. Sorry, we can't access // Never Gonna Give You Up

Did you know if you see a dialog like this, you can press CTRL + C to copy the text out?

Yes, a few years ago I was totally blown away by @samilaiho.com when he showed it.

Microsoft reports strong cloud earnings in Q2 as gaming declines Microsoft’s More Personal Computing division was the only business unit to post a revenue decline this quarter.

Microsoft's Q2 2026 (fiscal) earnings:

• 💻 Windows OEM + devices revenue up 1%
• 👾 Gaming rev down 9%
• 🕹️ Xbox content + services rev down 5%
• 🎮 Xbox hardware rev down 32%

full details here 👇

www.theverge.com/news/869493/...

Microsoft is working to rebuild trust in Windows 2026 is all about improving Windows

scoop: Microsoft is working to rebuild trust in Windows. The head of Windows tells me Microsoft will focus on "addressing pain points we hear consistently from customers." Full details in my Notepad newsletter this week, gift link here 👇 tinyurl.com/win11trust

Advancing Windows security: Disabling NTLM by default - Windows IT Pro Blog Learn how Windows is moving toward an NTLM-independent future with enhanced auditing, Kerberos enhancements, and a phased roadmap.

Oh hey. We announced *when* we're disabling NTLM by default.

Hint: soon.

I migrated my azure functions from PowerShell to C# because of assembly loading conflicts. Kinda annoying this stuff.

Azure Front Door: Implementing lessons learned following October outages | Microsoft Community Hub Abhishek Tiwari, Vice President of Engineering, Azure NetworkingAmit Srivastava, Principal PM Manager, Azure NetworkingVarun Chawla, Partner Director of...

Azure Front Door: Implementing lessons learned following October outages

techcommunity.microsoft.com/blog/azurene...

The widgets are super cool!

Obsidian 1.11 is now available for desktop and mobile!

The new mobile design gives more space to your notes, and helps you quickly navigate your vault.

You can now instantly access Obsidian from your lock screen, home screen, control center, Shortcuts, and Siri.

Investigating Security Releases of Open Source Packages, IEEE TRANSACTIONS ON SOFTWARE ENG'G, June 9, 2022, at 1, 9 (concluding that study results show that one-fourth of open-source projects do not release the new version fixing a vulnerability until over twenty days after the fix was made); see, e.g., SwiftOnSecurity, Change Metasploit Alert Port from 444 to 4444, GITHUB (Oct. 2, 2021), https://github.com/SwiftOnSecurity/sysmon-config/pull/105 [https://perma.cc/THG7-7U6H] (example of a pull request fixing an open-source project intended to improve system security pending for 1.5 years).

Holy crap I'm cited in a 2023 academic law paper... about a pull request on GitHub for a security fix I have neglected to integrate for five years LOL.

ir.lawnet.fordham.edu/cgi/viewcont...