Processes

An understanding of processes on Windows is critical for success in cyber operations. Several tools can be used to manage Windows processes, including Task Manager, Process Explorer, Tasklist, Taskkill, PowerShell, and Sysinternals tools. Defenders investigating malware often look at the parent of a suspicious process, however attackers can hide that parent process. The Windows notion of process integrity also applies to files. The important Windows processes are introduced.