Wondering why procexp.exe sees more handles than handle.exe
Both run from the same elevated user.
Even running as LocalSystem, handle.exe does not see all handles that procexp.exe sees.
Both run from the same elevated user.
Even running as LocalSystem, handle.exe does not see all handles that procexp.exe sees.
Handle.exe does support the backslash while searching as for \cmd.exe it does see entries, but still far less than ProcExp.exe does
- handle.exe: learn.microsoft.com/en-us/sysinter…
- procexp.exe: learn.microsoft.com/en-us/sysinter…
@markrussinovich any idea why this happens?
- handle.exe: learn.microsoft.com/en-us/sysinter…
- procexp.exe: learn.microsoft.com/en-us/sysinter…
@markrussinovich any idea why this happens?
Oh, `resmon.exe` shows the same entries as `handle.exe`.
Forgot this one from `resmon.exe`: searching for `System32\cmd.exe` returns none.
• • •
Missing some Tweet in this thread? You can try to
force a refresh
