https://github.com/codelassey/windows-running-processes
In this lab, I used TCP Endpoint Viewer, a tool in Sysinternals Suite, to identify any running processes on a windows machine.
https://github.com/codelassey/windows-running-processes
endpoint tcpview windows
Last synced: 12 months ago
JSON representation
In this lab, I used TCP Endpoint Viewer, a tool in Sysinternals Suite, to identify any running processes on a windows machine.
- Host: GitHub
- URL: https://github.com/codelassey/windows-running-processes
- Owner: codelassey
- Created: 2025-06-21T20:03:54.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2025-06-21T20:32:07.000Z (12 months ago)
- Last Synced: 2025-06-21T21:20:00.754Z (12 months ago)
- Topics: endpoint, tcpview, windows
- Homepage:
- Size: 493 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
Awesome Lists containing this project
README
# Scenario
In this lab, I explored windows processes. Processes are programs or applications in execution. I explored
the processes using Process Explorer in the Windows Sysinternals Suite. I also started and observed a
new process.
# Steps
- Downloaded [Windows Systinternals Suite](https://technet.microsoft.com/en-us/sysinternals/bb842062.aspx)
- Extracted the contents of the zip file and opened `tcpview.exe`
- Closed most softwares that were running
- Explored the `Isass.exe` windows process and identified the folder in which it was located to be `C:\Windows\System32\lsass.exe`
- Closed the properties window and checked that of other processes.
- I opened Microsoft Edge and observed in tcpview that the service had started and running in green colour.
- I closed the browser and realised the processes turned red in colour and stopped gradually.
- I opened Microsoft Edge again and researched the `msedge.exe` process. This executable runs the browser and its related processes, such as rendering web pages and handling network connections. It appeared multiple times and it means Edge uses a multi=process architecture, creating separate instances for tabs, extensions, etc.
# Screenshots
