Forum Discussion
netcat
Silver III
8 months agoWinDbg: Ep.5 – Kernel Internals
Question 9: Looking at the system process and the !token command, what is the User field? What I did: [...]
lkd> !process 0 0
**** NT ACTIVE PROCESS DUMP ****
PROCESS ffffdf0609685200
SessionI...
- 7 months ago
Did it again, read the questions again:
Looking at the current process and the !token command, what is the TS Session ID field?
Looking at the system process and the !token command, what is the User field?
-> Looking at the _system_ process, I got the correct answer.
netcat
Silver III
7 months agobump
KieranRowley
Community Manager
7 months agoHi netcat I am working with the internal teams to get you answers to this and the 2 other WinDbg questions which I know are still unanswered