+- Hack Forums (https://hackforums.net)
+-- Forum: Tech (https://hackforums.net/forumdisplay.php?fid=444)
+--- Forum: Coding (https://hackforums.net/forumdisplay.php?fid=151)
+---- Forum: Software Development (https://hackforums.net/forumdisplay.php?fid=118)
+---- Thread: [C] c++ Finding a list of proccess (/showthread.php?tid=4479856)
c++ Finding a list of proccess - Ammy - Oct 7, 2014
So what I want to do is make a exe that searchs for newly created proccess's . How would I do that? Sorry I'm so noob at c++
* - Baws. - Oct 7, 2014
Why don't you just use your task manager?
* - Ammy - Oct 7, 2014
(Oct 7, 2014 12:53 PM)Monkey.D Luffy Wrote: Why don't you just use your task manager?
This game that I'm working on anti-cheat is hideing the process
* - Irritiable - Oct 7, 2014
(Oct 7, 2014 12:51 PM)Ammy Wrote: So what I want to do is make a exe that searchs for newly created proccess's . How would I do that? Sorry I'm so noob at c++
Upon program start up: Record and log all currently active processes that are running.
Good luck! Let us know how your programming journey goes. I'll be here to silently observe.
* - CiM4 - Oct 7, 2014
Maybe you can set a global hook on the CreateProcess API
* - Muntailor - Oct 8, 2014
Just read about CreateToolhelp32Snapshot API in MSDN.
* - Irritiable - Oct 8, 2014
(Oct 8, 2014 01:50 AM)Muntailor Wrote: Just read about CreateToolhelp32Snapshot API in MSDN.
This is the correct answer.
There's one other (slightly more complex, less effective, more annoying) solution (without using that portion of the Win32 API).
* - .Zero - Oct 8, 2014
As Mutailor correctly said reateToolhelp32Snapshot API is correct answer. To build upon to that I'd like to say using NT system calls to capture "live" process running on the computer, the function is called NtQuerySystemInformation which is available and is documented heavily.
I'm sure Irritable was pointing towards this function, so I will partially give this credit to Irritable.