IT Multi-Tool
The high-performance, single-file Windows diagnostics and troubleshooting utility built for systems administrators, support engineers, and power users.
Built Different: The SysAdmin First Principles
100% Local & Private
Zero telemetry. Zero phone-home pings. Zero cloud sync. All settings and diagnostic histories remain strictly local to your machine.
Zero-Install Portable
Packaged as a single self-contained ReadyToRun win-x64 executable. No MSI, no installer, no runtimes required. Runs straight from a USB thumb drive.
True Uptime Engine
Never fooled by Windows Fast Startup or hybrid boots. Queries Windows Kernel-Boot Event 27 to calculate genuine cold restarts vs hibernation resumes.
Safe Elevation Model
Runs out-of-the-box as standard user. Never requests admin rights to read hardware, disks, network, or updates. UAC elevation prompts trigger only for destructive actions.
Embedded Microsoft Sysinternals Suite
No need to download Sysinternals packages on each client machine. IT Multi-Tool embeds the official 64-bit Microsoft Sysinternals binaries directly into its single executable. They extract seamlessly on-demand to %LocalAppData%\ITMultiTool\Sysinternals\ with automatic registry EULA acceptance (EulaAccepted=1).
Deep task & thread inspection, handles, DLL mappings, and CPU/RAM tracking.
Real-time active TCP & UDP endpoints, remote addresses, and process socket mappings.
Complete startup item, scheduled task, service, and registry persistence inspector.
Advanced real-time file system, registry, and process/thread activity tracer.
Search locked files, identify blocking processes, and terminate file locks safely.
Verify digital code signatures, publisher certificates, and SHA-256 binary validation.
1-click launcher for a privileged NT AUTHORITY\SYSTEM terminal session.
Advanced system security monitor and event log telemetry integration.
Dedicated Diagnostic & Triage Modules
Everything you need for instant single-PC hardware, network, disk, and update troubleshooting in one high-contrast interface.
Network & Identity
Real-time active adapter telemetry with IPv4/IPv6, Default Gateway, DNS, and DHCP lease status. Native WLAN API Wi-Fi SSID, frequency band (2.4/5/6 GHz), signal percentage, and dynamic public IP detection.
- Active Adapter Selector & Auto-Refresh
- Prominent Ping Triage: Gateway, DNS, Net
- Integrated TCPView Live Socket Viewer
Disks & Storage Health
Complete drive topology for NVMe, SSD, HDD, and removable media. Visual capacity meters with dual color warning thresholds (warning <20%, critical <10%). Detects BitLocker encryption without admin elevation.
- BitLocker Status Detection (Standard User)
- 1-Click Clean Up Launcher (cleanmgr)
- Drive Defrag / Trim Launcher (dfrgui)
PC Specs & Hardware Topology
Instant hardware audit: CPU topology & max boost clock, RAM speed & physical module layout, dedicated GPU VRAM, Motherboard manufacturer & BIOS revision, machine serial number, and battery wear percentage.
- Secure Boot State (Registry query)
- TPM 1.2 / 2.0 (TBS API - No admin needed)
- Battery Health & Wear Telemetry
Updates & Winget Packages
Dual-engine update triage. Background thread runs an instant offline-cached Windows Update search on tab open, with user-initiated online scan. Fully integrated Winget package scanner detects available software updates.
- Pending Reboot Detection
- Winget Upgrades List & One-Click Update
- Direct Windows Update Settings Launcher
Software & Drivers Inventory
Comprehensive searchable inventory of all installed 32-bit and 64-bit applications alongside active hardware drivers. Filter by vendor, date, or version, and export complete audit logs directly to CSV.
- Live Search & Name Filtering
- 1-Click CSV Export for IT Inventories
- Contextual Sysinternals Process Explorer Launch
Tools & System Triage
Quick Action Triage buttons for Flush DNS (standard user), Release/Renew IP, and Adapter Restart. Features Keep Awake mode, instant browser speedtest launchers, and direct admin console launchers.
- Copy All Plain-Text Report (Ctrl+Shift+C)
- Export Report to Text File (Ctrl+E)
- Keep Awake (Caffeine mode)
Media Sanitizer & Nuke Zone
TAB 7 • High-Hazard Enterprise Disk DestructionEnterprise-grade disk wiping and file shredding. Implements DoD 5220.22-M 3-Pass, NIST SP 800-88 Clear/Purge, and CSPRNG Random. Strict safety airbags permanently prevent wiping active Windows boot drives. Requires typing confirmation and a 10-second button hold.
Keyboard Shortcuts Matrix
| Shortcut | Action | Description |
|---|---|---|
| F5 | Refresh All | Instantly re-queries all tabs and diagnostic information. |
| Ctrl + Shift + C | Copy Diagnostic Summary | Copies full plain-text machine diagnostic report to Windows clipboard. |
| Ctrl + E | Export Diagnostic File | Exports plain-text summary to <PC>-info-<date>.txt. |
| Ctrl + 1 | Tab: Network & Identity | Jump immediately to active adapters, IP, DNS, and TCPView. |
| Ctrl + 2 | Tab: Disks & Storage | Jump to drives, free space bars, and BitLocker protection. |
| Ctrl + 3 | Tab: PC Specs | Jump to CPU, RAM layout, GPU, BIOS, Secure Boot, and TPM. |
| Ctrl + 4 | Tab: Updates & Winget | Jump to Windows Update scan and Winget app packages. |
| Ctrl + 5 | Tab: Software & Drivers | Jump to installed programs, driver inventory, and CSV export. |
| Ctrl + 6 | Tab: Tools | Jump to Keep Awake, IP flush/renew, and Sysinternals suite. |
| Ctrl + 7 | Tab: Sanitizer (Nuke Zone) | Jump to high-hazard enterprise disk wiping and file shredder. |
Windows SmartScreen First-Run Notice
Because IT Multi-Tool is an unsigned portable executable designed for IT administrators and power users, Windows Defender SmartScreen may display: "Windows protected your PC" on its first launch.
Zero network calls are made during launch. You can verify the executable hash anytime against the SHA-256 published above.
Download IT Multi-Tool
Single portable executable. No installer, zero dependencies, ReadyToRun for Windows 10 & 11 (64-bit).
Download IT-Multi-Tool.exe v1.0.27Get-FileHash .\IT-Multi-Tool.exe -Algorithm SHA256