From 3d27e6b7de3426a1268d2b2732b08d5e2adade1b Mon Sep 17 00:00:00 2001 From: Matt Graeber Date: Thu, 16 May 2013 20:40:21 -0400 Subject: _SYSTEM_HANDLE_INFORMATION prints as a table now --- .../Get-NtSystemInformation.format.ps1xml | 90 ++++++++++++++-------- 1 file changed, 56 insertions(+), 34 deletions(-) diff --git a/ReverseEngineering/Get-NtSystemInformation.format.ps1xml b/ReverseEngineering/Get-NtSystemInformation.format.ps1xml index 5b7d700..3a73b47 100644 --- a/ReverseEngineering/Get-NtSystemInformation.format.ps1xml +++ b/ReverseEngineering/Get-NtSystemInformation.format.ps1xml @@ -206,40 +206,62 @@ _SYSTEM_HANDLE_INFORMATION - - - - - - UniqueProcessId - 0x{0:X4} - - - CreatorBackTraceIndex - 0x{0:X4} - - - ObjectTypeIndex - 0x{0:X2} - - - HandleAttribute - - - HandleValue - 0x{0:X4} - - - - "0x$($_.Object.ToString("X$([IntPtr]::Size * 2)"))" - - - GrantedAccess - - - - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + UniqueProcessId + 0x{0:X4} + + + CreatorBackTraceIndex + 0x{0:X4} + + + ObjectTypeIndex + 0x{0:X2} + + + HandleAttribute + + + HandleValue + 0x{0:X4} + + + "0x$($_.Object.ToString("X$([IntPtr]::Size * 2)"))" + + + GrantedAccess + + + + + GenericMappingView -- cgit v1.2.3