ESET SysInspector is a free Windows diagnostic utility for investigating unusual system behavior. It gathers a snapshot of the computer's processes, installed software, drivers, network connections and important registry entries, then presents that information for examination. The report helps trace problems associated with software conflicts, hardware incompatibility or suspicious activity.
Capturing and examining system data
Generating a log records the computer's current state. The collected information includes running processes and services alongside installed applications, drivers and connection information, bringing several parts of the operating environment into one report.
An expandable navigation tree organizes the results. Selecting an entry exposes its description and details, so an investigator can move from a category to the objects within it. Process and network views provide routes into their respective records.
ESET SysInspector can run from a standard or restricted account, although some system information requires administrator access. A capture made with fewer permissions therefore contains less information about the operating environment.
Filtering entries by risk and text
ESET SysInspector evaluates characteristics of files, processes and registry objects using heuristic rules. Each object receives a risk assessment, while a navigation section takes the color of its highest-risk object. This makes the tree useful for locating areas that warrant closer examination.
Selecting a risk color filters the displayed entries. The General view also counts files by severity, giving an overview of how the snapshot's files are distributed across the classifications before individual records are examined.
Text filtering searches for entries matching a typed expression. Case-sensitive matching distinguishes letter case, whole-word matching restricts the search to an exact word, and regular expressions allow pattern-based searches. Several filters can be active together to narrow the result set.
Saving and generating reports
Saved files and anonymous logs
The Home view opens ESIL, JSON and XML logs, and saves reports as ESIL, JSON or ZIP files. Choosing a recent snapshot reopens its data in the Log view. Associating ESIL files with ESET SysInspector allows those saved reports to open directly in the program.
Personal and Anonymous logs control the information included in a report. A Personal log displays its name and path; the anonymous option omits sensitive information for sharing. The file name and destination can be chosen when saving the snapshot.
The standalone utility stores reports as local files. Within ESET Endpoint products, snapshot management also provides creation time, comments, creator and status information, with controls to show, create or delete snapshots. The inspection functions and program controls remain the same.
Command-line report generation
Command-line controls generate a report in a chosen destination, omit sensitive information and compress the output into a ZIP archive. Silent mode suppresses the graphical window, while supersilent mode also suppresses command-line output. If no destination path is supplied in a silent mode, the current directory is used.
