Windows Internals

Walkthrough summary

Windows Internals TryHackMe walkthrough with 17 answered prompts and lab methodology notes.

Sample prompts covered

• What is the process ID of "notepad.exe"?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the parent process ID of the previous process?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the integrity level of the process?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the thread ID of the first thread created by notepad.exe?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the stack argument of the previous thread?
  Open the walkthrough page to inspect the full answer and command flow.