I'm looking for the underlying API calls that netstat -b is using to determine the owning processes for each socket. Any ideas?
You need to look at the IPHelper APIs, in this case specifically GetExtendedTcpTable and GetOwnerModuleFromTcpEntry
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With