systeminformer icon indicating copy to clipboard operation
systeminformer copied to clipboard

Handle monitoring mode

Open GflowerG opened this issue 4 years ago • 0 comments

When I open the properties of any process, I can watch how the process opens and closes various handles. The problem is that I do not see the handles there that were closed before.

I have some ideas...

  1. By analogy with the "API Monitor", where each application launch is frozen at the start. Then I can go to the properties of the process and watch the handles.

  2. Option that does not freeze processes, but instead displays all closed handles as "Unloaded Modules". This would be preferable because I don't need to adjust the "Highlighting duration" in the settings.

I think both are useful for analysis.

GflowerG avatar Sep 20 '21 19:09 GflowerG