systeminformer
systeminformer copied to clipboard
Handle monitoring mode
When I open the properties of any process, I can watch how the process opens and closes various handles. The problem is that I do not see the handles there that were closed before.
I have some ideas...
-
By analogy with the "API Monitor", where each application launch is frozen at the start. Then I can go to the properties of the process and watch the handles.
-
Option that does not freeze processes, but instead displays all closed handles as "Unloaded Modules". This would be preferable because I don't need to adjust the "Highlighting duration" in the settings.
I think both are useful for analysis.