SystemModuleView _SYSTEM_MODULE ImageBaseAddress ImageSize Flags Index Rank LoadCount NameOffset Name "0x$($_.ImageBaseAddress.ToString("X$([IntPtr]::Size * 2)"))" ImageSize 0x{0:X8} Flags 0x{0:X8} Index 0x{0:X4} Rank 0x{0:X4} LoadCount 0x{0:X4} NameOffset 0x{0:X4} $_.Name -replace '\\SystemRoot', $Env:SystemRoot SystemLockView _SYSTEM_LOCK_INFORMATION Address Type ExclusiveOwnerThreadId ActiveCount ContentionCount NumberOfSharedWaiters NumberOfExclusiveWaiters "0x$($_.Address.ToString("X$([IntPtr]::Size * 2)"))" Type 0x{0:X4} ExclusiveOwnerThreadId 0x{0:X4} ActiveCount 0x{0:X8} ContentionCount 0x{0:X8} NumberOfSharedWaiters 0x{0:X8} NumberOfExclusiveWaiters 0x{0:X8} PoolTagView _SYSTEM_POOL_TAG_INFORMATION Tag PagedPoolAllocs PagedPoolFrees PagedPoolUsage NonPagedPoolAllocs NonPagedPoolFrees NonPagedPoolUsage Tag PagedPoolAllocs 0x{0:X8} PagedPoolFrees 0x{0:X8} PagedPoolUsage 0x{0:X8} NonPagedPoolAllocs 0x{0:X8} NonPagedPoolFrees 0x{0:X8} NonPagedPoolUsage 0x{0:X8} SystemHandleView _SYSTEM_HANDLE_INFORMATION UniqueProcessId CreatorBackTraceIndex ObjectType HandleAttribute HandleValue Object GrantedAccess UniqueProcessId 0x{0:X4} CreatorBackTraceIndex 0x{0:X4} ObjectType HandleAttribute HandleValue 0x{0:X4} "0x$($_.Object.ToString("X$([IntPtr]::Size * 2)"))" GrantedAccess GenericMappingView _GENERIC_MAPPING GenericRead GenericWrite GenericExecute GenericAll GenericRead 0x{0:X8} GenericWrite 0x{0:X8} GenericExecute 0x{0:X8} GenericAll 0x{0:X8} ObjectTypeView _SYSTEM_OBJECTTYPE_INFORMATION NumberOfObjects 0x{0:X8} NumberOfHandles 0x{0:X8} TypeIndex 0x{0:X8} InvalidAttributes GenericMapping ValidAccessMask PoolType SecurityRequired 0x{0:X2} WaitableObject 0x{0:X2} TypeName Objects ObjectView _SYSTEM_OBJECT_INFORMATION Object "0x$($_.Object.ToString("X$([IntPtr]::Size * 2)"))" CreatorUniqueProcess "0x$($_.CreatorUniqueProcess.ToString("X$([IntPtr]::Size * 2)"))" CreatorBackTraceIndex 0x{0:X4} Flags PointerCount 0x{0:X8} HandleCount 0x{0:X8} PagedPoolCharge 0x{0:X8} NonPagedPoolCharge 0x{0:X8} ExclusiveProcessId "0x$($_.ExclusiveProcessId.ToString("X$([IntPtr]::Size * 2)"))" SecurityDescriptor "0x$($_.SecurityDescriptor.ToString("X$([IntPtr]::Size * 2)"))" NameInfo CodeIntegrityTypeView _SYSTEM_CODEINTEGRITY_INFORMATION CodeIntegrityOptions 0x{0:X8} LockdownState