Forum Discussion

netcat's avatar
netcat
Icon for Silver III rankSilver III
9 months ago
Solved

WinDbg: Ep.5 – Kernel Internals

Question 9: Looking at the system process and the !token command, what is the User field? What I did: [...] lkd> !process 0 0 **** NT ACTIVE PROCESS DUMP **** PROCESS ffffdf0609685200 SessionI...
help & support
  • netcat's avatar
    netcat
    8 months ago

    Did it again, read the questions again:
    Looking at the current process and the !token command, what is the TS Session ID field?
    Looking at the system process and the !token command, what is the User field?

    -> Looking at the _system_ process, I got the correct answer.

netcat's avatar
netcat
Icon for Silver III rankSilver III
8 months ago

bump

KieranRowley's avatar
KieranRowley
Icon for Community Manager rankCommunity Manager
8 months ago

Hi netcat I am working with the internal teams to get you answers to this and the 2 other WinDbg questions which I know are still unanswered