#process-internals

Windows Process and Thread Internals: Handles, Tokens, and Objects

How the Windows kernel represents processes as containers of handles and a security token, and the tools to inspect both live.