Process Explorer course

Lessons

1. The process tree Parent/child relationships and why they matter.
2. Handles and DLLs Find who has a file open and which modules are loaded.
3. Process Explorer Keyboard Shortcuts Learn Process Explorer keyboard shortcuts for process inspection, lower-pane views, searching, refreshing, exporting, column sets, and safe process control.
4. Launch New Processes with Process Explorer Learn how to launch programs from Process Explorer normally, as an administrator, or as a limited user, then verify each process security context.
5. Create Process Dump Files with Process Explorer Learn how to create minidumps and full process-memory dumps with Process Explorer, choose the correct process, preserve diagnostic context, and prepare files for WinDbg analysis.
6. Understanding the Default Process Explorer Tree View Learn how to read Process Explorer's default process tree, activity graphs, columns, sorting, refresh behavior, and status bar for Windows troubleshooting.
7. Process Explorer Display Options Learn how to configure Process Explorer window behavior, fonts, process visibility, automatic scrolling, system information, and Task Manager integration.
8. Using the DLL View in Process Explorer Learn how to use Process Explorer DLL View to inspect executable images, DLLs, mapped data files, paths, publishers, and module load activity.
9. DLL View Tabs in Process Explorer Learn how the Image and Strings tabs in Process Explorer identify loaded DLLs, verify signatures, show memory mappings, and compare disk strings with memory strings.
10. Identify the Process That Owns a Window with Process Explorer Learn how to use Process Explorer's Find Window's Process crosshair tool to identify, inspect, and safely troubleshoot the process behind any Windows application window.
11. How to Kill a Process with Process Explorer Learn how to safely use Kill Process and Kill Process Tree in Process Explorer, manage confirmation prompts, and avoid terminating critical Windows processes.
12. Using the .NET Performance Tab in Process Explorer Learn how to use Process Explorer's .NET Performance tab to inspect AppDomains, CLR performance counters, managed runtime activity, and troubleshooting data.
13. Understanding the Performance Tab in Process Explorer Learn how to interpret CPU, memory, priority, I/O, and handle metrics for an individual process in Process Explorer.
14. Process Actions in Process Explorer Learn how to inspect, control, troubleshoot, suspend, restart, terminate, and create dumps for Windows processes using Process Explorer actions.
15. View Process Properties in Process Explorer Learn how to open Process Explorer Process Properties and use its tabs to inspect process identity, performance, threads, security, network activity, services, and more.
16. Run Process Explorer as Administrator Learn how to run Process Explorer with administrative elevation, understand UAC and RunAs, verify elevated access, and troubleshoot remaining access restrictions.
17. Save Process Activity Snapshots in Process Explorer Learn how to save Process Explorer process activity as a tab-delimited text snapshot, including visible columns and lower-pane details.
18. Understanding the Security Tab in Process Explorer Learn how to inspect Process Explorer security tokens, group and privilege states, UAC virtualization, SIDs, and process-object permissions.
19. Use Shutdown Actions in Process Explorer Learn how to use Process Explorer's File > Shutdown menu to lock, log off, sleep, hibernate, restart, or shut down Windows safely.
20. Using the System Information Window in Process Explorer Learn how to open and interpret Process Explorer's System Information window, including CPU, memory, I/O, network, disk, and GPU performance graphs.
21. Using the TCP/IP Tab in Process Explorer Learn how to inspect a process's active TCP and UDP endpoints, connection states, local and remote ports, and hostname resolution in Process Explorer.
22. Understanding the Threads Tab in Process Explorer Learn how to inspect Windows threads, interpret TID, CPU, Cycles Delta, and Start Address, view stacks and modules, and safely suspend or terminate threads in Process Explorer.
23. How to View Data Execution Prevention (DEP) Status in Process Explorer Learn how to add the DEP Status column in Process Explorer, interpret its values, and investigate DEP differences between 32-bit and 64-bit processes.
24. View Process Integrity Levels in Process Explorer Learn how to enable the Integrity Level column in Process Explorer and interpret Low, Medium, High, and System process integrity levels.