Detectar cuando se crea un hilo nuevo en Windows con PowerShell | Operating systems, scripting, PowerShell and security

Hilos, PowerShell, Sistemas operativos

$hilos = (Get-WmiObject -Class Win32_Thread)
#$hilos.count
for(1)
{
    $hilos2 = (Get-WmiObject -Class Win32_Thread)
    #$hilos2.count
    $nuevoshilos = (Compare-Object -ReferenceObject $hilos -DifferenceObject $hilos2 -Property Handle,ProcessHandle).ProcessHandle
    foreach($hilo in $nuevoshilos){(Get-Process -Id $hilo).ProcessName}
    $hilos = (Get-WmiObject -Class Win32_Thread)
    "---------------"
}

$hilos = (Get-WmiObject -Class Win32_Thread)

#$hilos.count

for(1)

{

$hilos2 = (Get-WmiObject -Class Win32_Thread)

#$hilos2.count

$nuevoshilos = (Compare-Object -ReferenceObject $hilos -DifferenceObject $hilos2 -Property Handle,ProcessHandle).ProcessHandle

foreach($hilo in $nuevoshilos){(Get-Process -Id $hilo).ProcessName}

$hilos = (Get-WmiObject -Class Win32_Thread)

"---------------"

}

Detectar cuando se crea un hilo nuevo en Windows con PowerShell (Sistemas operativos, PowerShell, Hilos)

LIBRO DE POWERSHELL

LO ÚLTIMO

VÍDEOS