Processes
- View processes in a tree view with highlighting
- View detailed process performance statistics and graphs
- Process tooltips are detailed and show the context-specific information
- Select multiple processes and terminate, suspend or resume Them
- (32-bit only) Bypass almost all forms of process protection
- Restart processes
- Empty the working set of processes
- Set affinity, priority and virtualization
- Create process dumps
- Use over a dozen methods to terminate processes
- Detach processes from debuggers
- View process heaps
- View GDI handles
- Inject DLLs
- View DEP status, and even enable / disable DEP
- View environment variables
- View and edit security descriptors process
- View image properties Such as imports and exports
Threads
- View thread start addresses and stacks with symbols
- Threads are highlighted if suspended, or are GUI threads
- Select multiple threads and terminate, suspend or resume Them
- Force terminate threads
- View TEB TEB addresses and view contents
- (32-bit only) Find out what a thread is doing, and what objects it is waiting on
- View and edit security descriptors thread
Tokens
- View full token details, including user, owner, primary group, the session ID, status elevation , and more
- View token groups
- View privileges and even enable, disable or remove Them
- View and edit security token descriptors
Modules
- View modules and mapped files in one list
- Unload DLLs
- View file properties and open Them in Windows Explorer
Memory
- View a list of virtual memory
- Read and modify memory using a hex editor
- Dump memory to a file
- Free or decommit memory
- Scan for strings
Handles
- View process handles, complete with highlighting for attributes
- Search for handles (and DLLs and mapped files)
- Close handles
- (32-bit only) Set handle attributes - Protected and Inherit
- Granted access of handles can be viewed symbolically instead of plain hex numbers
- Pls detailed view object properties supported
- View and edit object security descriptors
Services
- View a list of all services
- Create services
- Start , stop, pause, continue or delete services
- Edit service properties
- View service dependencies and dependents
- View and edit the service security descriptors
Network
- View a list of network connections
- Close network connections
- Use tools Such as whois, traceroute and ping
