windows-diagnostics

Diagnose Windows systems using Sysinternals and NirSoft utilities.

Updated May 13, 2026
One-click install
npx skills add https://github.com/14ag/claude-skills --skill windows-diagnostics-14ag
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: windows-diagnostics
Source: https://github.com/14ag/claude-skills/tree/main/windows-diagnostics
Command: npx skills add https://github.com/14ag/claude-skills --skill windows-diagnostics-14ag

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Administrators and IT professionals need to diagnose and troubleshoot complex Windows system issues efficiently.

Core Features & Use Cases

  • System and Process Analysis: Use Sysinternals tools like Process Explorer, RAMMap, and Sysmon to analyze system behavior, memory usage, and process activity.
  • Network Troubleshooting: Utilize tcpvcon, TCPView, and WHOIS tools to monitor network connections, detect suspicious IPs, and analyze traffic.
  • Disk and Storage Inspection: Employ disk2vhd, diskext, and DiskView to create snapshots, inspect disk layout, and investigate storage issues.
  • Security and Forensics: Leverage RootkitRevealer, sigcheck, and Registry tools to detect rootkits, verify signatures, and manage registry entries.
  • Automation and Data Collection: Scripts automate workflows, including process listing, memory dump collection, and system information gathering.

Quick Start

Run the process explorer to check active processes, then use the memory analysis tools to identify leaks, followed by network scans to verify connections.

Frequently Asked Questions about windows-diagnostics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run comprehensive Windows diagnostics for memory and process analysis?

To run Windows diagnostics, use integrated Sysinternals tools like Process Explorer and RAMMap to analyze active processes and memory usage. This suite automates process listing and memory dump collection to identify system behavior and memory leaks on live Windows environments.

What is the best way to troubleshoot suspicious network connections on a live Windows system?

The best way to troubleshoot suspicious network connections is using network diagnostics tools like tcpvcon, TCPView, and WHOIS. These monitor active network traffic, detect suspicious IPs, and analyze connections to secure your Windows environment.

Can I use Sysinternals tools to inspect disk layout and create storage snapshots?

Yes, you can use Sysinternals disk and storage inspection tools like disk2vhd, diskext, and DiskView. These utilities create virtual hard disk snapshots, inspect disk layout, and investigate storage issues within your Windows troubleshooting workflow.

How do I detect rootkits and verify file signatures during Windows security forensics?

To detect rootkits and verify signatures during security forensics, use tools like RootkitRevealer and sigcheck. These utilities scan for hidden rootkits, verify digital signatures, and manage registry entries to analyze system security.

Does this Windows troubleshooting approach require manual execution of every diagnostic script?

No, this Windows troubleshooting approach does not require manual execution for every task. It includes scripting automation that handles workflows like process listing, memory dump collection, and system information gathering automatically.