mirror of
https://github.com/hakril/PythonForWindows
synced 2026-06-08 14:31:45 +00:00
hakril
69 lines
1021 B
ReStructuredText
69 lines
1021 B
ReStructuredText
Processes and Threads
|
|
"""""""""""""""""""""
|
|
|
|
.. module:: windows.winobject
|
|
|
|
CurrentProcess
|
|
''''''''''''''
|
|
|
|
.. note::
|
|
|
|
See sample :ref:`sample_current_process`
|
|
|
|
.. autoclass:: CurrentProcess
|
|
:members:
|
|
:inherited-members:
|
|
|
|
CurrentThread
|
|
'''''''''''''
|
|
|
|
.. autoclass:: CurrentThread
|
|
:members:
|
|
:inherited-members:
|
|
|
|
WinProcess
|
|
''''''''''
|
|
|
|
.. note::
|
|
|
|
See sample :ref:`sample_remote_process`
|
|
|
|
.. autoclass:: WinProcess
|
|
:members:
|
|
:inherited-members:
|
|
|
|
|
|
WinThread
|
|
'''''''''
|
|
|
|
.. autoclass:: WinThread
|
|
:members:
|
|
:inherited-members:
|
|
|
|
|
|
.. autoclass:: DeadThread
|
|
:members:
|
|
:inherited-members:
|
|
|
|
|
|
PEB Exploration
|
|
"""""""""""""""
|
|
|
|
The :mod:`windows` module is able to parse the PEB of the current process or remote process.
|
|
The :class:`PEB` is accessible via ``process.peb`` and is of type :class:`PEB`.
|
|
|
|
.. note::
|
|
|
|
See sample :ref:`sample_peb_exploration`
|
|
|
|
.. autoclass:: PEB
|
|
:members:
|
|
:inherited-members:
|
|
|
|
.. autoclass:: WinUnicodeString
|
|
|
|
.. autoclass:: LoadedModule
|
|
|
|
|
|
|