Chapter 4. Process Monitor

David Solomon, my Windows Internals co-author, was hired to deliver a Microsoft Windows internals class for kernel-support engineers at a major Windows original equipment manufacturer (OEM). A couple of months before the class, the company asked if he would integrate one of its internal kernel-analysis tools into the training. Dave thought that whatever tool they had should be easy enough to learn and he charges a lot of money, so he agreed.

Of course, Dave waited until the flight the night before to even bother looking at the tool. After watching a few episodes of Star Trek on his laptop, he decided to take a break and launched the tool, only to be greeted with an error message: “This utility requires [major Windows ...

Get Windows® Sysinternals Administrator’s Reference now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.