Shulou(Shulou.com)05/31 Report--

Powerful system debugger Process Hacker how to use, many novices are not very clear about this, in order to help you solve this problem, the following editor will explain in detail for you, people with this need can come to learn, I hope you can gain something.

What we introduce to you today is a free and powerful multi-function tool that researchers can use to monitor their system resources, debug software or detect malware.

Process Hacker

Official website: https://processhacker.sourceforge.io/GitHub: https://github.com/processhacker/processhacker

System requirements: Windows7 and above, support 32-bit or 64-bit.

Function introduction

Provide a detailed overview of system activity information, support highlighting; provide icon data and statistics to help us quickly track target resources and processes; cannot edit or delete files? Track the process that is using the target file; diagnose the active network connection and close the connection directly; obtain real-time disk access information; view stack memory data in kernel mode, supporting WOW64 and .NET; go beyond services.msc: create, edit, and control services; small, removable, no installation; 100% free software (under GPL v3 license agreement)

Project construction

Require Visual Studio (version 2017 and later)

Execute the build_release.cmd file in the build directory to compile the project code. If you want to use Visual Studio to build the project, you can load the ProcessHacker.sln and Plugins.sln solutions.

You can download the free version of Visual Studio Community Edition from [here] to build, run, or develop Process Hacker.

Additional information: you cannot run a 32-bit version of ProcessHacker on a 64-bit operating system.

Tool settin

If you run Process Hacker directly from a flash drive, you also need to save the Process Hacker settings. Here, you need to create an empty file called "ProcessHacker.exe.settings.xml" in the same directory as ProcessHacker.exe.

Plug-in support

Click Hacker- > Plugins configuration tool plug-in.

If you encounter a program crash caused by a plug-in, make sure that both the plug-in and Process Hacker are up to date.

The disk and network information provided by the ExtendedTools plug-in can only be used in environments where Process Hacker runs with administrator privileges.

KProcessHacker

ProcessHacker uses kernel-mode drives and KProcessHacker to assist with specific features, including:

Capture kernel mode stack data; improve process enumeration efficiency; get file information; get EtwRegistration object name; set Handle property

Note that by default, KprocessHacker only allows processes with administrator privileges to establish connections. Do the following to allow ProcessHacker to view all processes (without administrator privileges):

In the registry editor, find HKEY_LOCAL_MACHINE\ SYSTEM\ CurrentControlSet\ Services\ KProcessHacker3; under this key, create a key called Parameters; create a DWORD value named SecurityLevel, set to 2; if you are not using the official version, you need to set it to 0; finally, restart the KprocessHacker3 service (sc stop KProcessHacker3,sc start KProcessHacker3); will it help you to finish reading the above? If you want to know more about the relevant knowledge or read more related articles, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.