Same user, same file, one process gets access and the other doesn’t. Before changing the ACL again, it’s worth looking at the other half of the check: the caller’s token.
Read the articleOpen Process Explorer as administrator and click through a few processes. Modules, handles, threads, memory: plenty to look at. Then try a protected process. It’s still in the list, but some of the interesting bits are missing or...
Read the articleThe easy version of process creation is:
Read the articleLonger investigations, small discoveries, and reminders for next time.
All 59 articles