Not sure if this would be the best forum to ask this question, but here goes.
If giving a Windows process list not knowing the version of the OS, how might I identify which OS it is?
Does anyone have any good web pages that might be helpful to identify processes that are unique to say Windows XP, Vista, 7, etc…
Thanks for any help…
Not sure if this would be the best forum to ask this question, but here goes.
If giving a Windows process list not knowing the version of the OS, how might I identify which OS it is?
Does anyone have any good web pages that might be helpful to identify processes that are unique to say Windows XP, Vista, 7, etc…
Thanks for any help…
Well, you are asking this question the 2nd time
http//www.forensicfocus.com/Forums/viewtopic/t=14097/
My replies will not get better or longer, so you should read the references mentioned 3 weeks ago.
Hint look at taskhost.exe, taskhostw.exe or taskhostex.exe!
Robin