netcat
Bronze III
Bronze IIIWinDbg: Ep.5 – Kernel Internals
Question 9: Looking at the system process and the !token command, what is the User field? What I did: [...]
lkd> !process 0 0
**** NT ACTIVE PROCESS DUMP ****
PROCESS ffffdf0609685200
SessionI...
Did it again, read the questions again:
Looking at the current process and the !token command, what is the TS Session ID field?
Looking at the system process and the !token command, what is the User field?
-> Looking at the _system_ process, I got the correct answer.
