[Autogenerated] What is the process consist of?
Process has several important ingredients.
One of them is virtual address space that is used to allocate memory.
Use memory in general in the context of this process,
we know that most processes are based on some executable image,
which is the E x E file containing the initial code and data to run the process.
Every process has its own handle table,
which is used to access various kernel objects and kernel objects or
executive objects are used in windows in many,
many ways,
depending on the type of object they allow us to get
funky personality out of Windows.
If you have a file object for instance, we can access a file or a device.
If we have a registry key object,
we can access some information in the registry and so on.
So every process has its own private handle table.
Every process has a primary token.
This is the access token.
The security context under which all the threats in
the process executed by default.
And then of course we have threats.
Threats are necessary in order to actually execute code.
We know that the process is in itself,
a management object doesn't really execute any code
doesn't really mean anything.
Threats are the actual entities running code and
that's why when the process is created,
one threat is created with it in a typical way and then a
threat can also perform something called,
impersonation and have its own token known as an impersonation token.
We'll discuss tokens in the future course when we look at security.
So these are the basic ingredients and the most important pieces of the process.