Login
From:
Boschko Security Blog
(Uncensored)
subscribe
QueryFullProcessImageNameW Under-the-Hood - Reversing NtQueryInformationProcess
https://boschko.ca/ntqueryinformationprocess-reverse-engineering/
links
backlinks
Tagged with:
reverse engineering
Roast topics
Find topics
Find it!
How a path across processes can be obtained from PEB's LDR linked list through QueryFullProcessImageNameW under the hood.