Skip to content

Instantly share code, notes, and snippets.

@mvankuipers

mvankuipers/tf-article2-windbg-1.txt Secret

Created August 13, 2017 20:50
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save mvankuipers/60c08ceda5905aefd26323c8baa29c04 to your computer and use it in GitHub Desktop.
Save mvankuipers/60c08ceda5905aefd26323c8baa29c04 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
tf-article2-windbg-1.txt
0: kd> !process 0 0
**** NT ACTIVE PROCESS DUMP ****
PROCESS fffffa801916b5d0
SessionId: none Cid: 0004 Peb: 00000000 ParentCid: 0000
DirBase: 00187000 ObjectTable: fffff8a000001890 HandleCount: 560.
Image: System
PROCESS fffffa8028effb10
SessionId: none Cid: 0130 Peb: 7fffffd8000 ParentCid: 0004
DirBase: 7d9ed5000 ObjectTable: fffff8a000174d80 HandleCount: 36.
Image: smss.exe
PROCESS fffffa802949bb10
SessionId: 0 Cid: 01b8 Peb: 7fffffdf000 ParentCid: 0174
DirBase: 7cf890000 ObjectTable: fffff8a000b82010 HandleCount: 713.
Image: csrss.exe
...
PROCESS fffffa8019218b10
SessionId: 1 Cid: 02f0 Peb: 7fffffd5000 ParentCid: 0808
DirBase: 652e89000 ObjectTable: fffff8a00cacc270 HandleCount: 58.
Image: notepad.exe
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment