winsiderss / systeminformer

A free, powerful, multi-purpose tool that helps you monitor system resources, debug software and detect malware. Brought to you by Winsider Seminars & Solutions, Inc. @ http://www.windows-internals.com
https://systeminformer.sourceforge.io
MIT License
10.53k stars 1.36k forks source link

Add CurrentDirectory to Columns fr Process View #2078

Open onchaosteam opened 1 month ago

onchaosteam commented 1 month ago

Description of the feature, modification, idea or suggestion

Feature Request,

I would like to see CurrentDirectory added to the Column view for the process list, This particular one seems absent.

A good way of spotting a process masquerading as another is to quickly spot out the current directory that the process is in , eg if a svchost.exe has a current working directory of C:\Windows\Tasks is pretty unusual.

I tried to do it myself with the source code but keep getting memory issues as programming in C is not something I am familiar with.

Cheers T

Proposed implementation details (optional)

No response

dmex commented 1 month ago

This particular one seems absent.

The current direcotry requires copying strings from the remote process memory for all processes, every second otherwise it doens't show accuate information.