Lab Processes - echadbourne/ChadbourneSYS-140 GitHub Wiki

Summary:

  • In this lab we used the program "Process Explorer" to look at the processes being executed on our devices. We were able to view new processes being started, subprocesses under one main one, and processes being terminated, along with the threads and stacks of threads associated with a process.

Useful Definitions (taken from lab):

  • Threads - Parts of processes that have their own execution space to run
  • Stacks - regions of memory where data is added in a last-in-first-out manner. Each thread has its own stack.

Problems:

  • I originally tried to do this with my VMware Windows VM but that VM did not have the 7-zip application that was used in the lab, so I just switched back to the online VM, and that worked out fine.

Other Items: