Shulou(Shulou.com)06/03 Report--

Windows object Manager is used for Windows resource management, including kernel objects (file objects, event objects, mutexes, process objects, thread objects), GDI objects (bitmaps, brushes, fonts, palettes), User objects (shortcuts, cursors, menus, forms)

Object structure

Commonly used kernel object viewing tools

Winobj

Process Explorer

Kernel debugging command:! handle

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.