You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: NtObjectManager/NtObjectManager.psm1
+17-12Lines changed: 17 additions & 12 deletions
Original file line number
Diff line number
Diff line change
@@ -43,15 +43,15 @@ Get a list of ALPC Ports that can be opened by a specified token.
43
43
.DESCRIPTION
44
44
This cmdlet checks for all ALPC ports on the system and tries to determine if one or more specified tokens can connect to them.
45
45
If no tokens are specified then the current process token is used. This function searches handles for existing ALPC Port servers as you can't directly open the server object and just connecting might show inconsistent results.
46
-
.PARAMETERProcessIds
46
+
.PARAMETERProcessId
47
47
Specify a list of process IDs to open for their tokens.
48
-
.PARAMETERProcessNames
48
+
.PARAMETERProcessName
49
49
Specify a list of process names to open for their tokens.
50
-
.PARAMETERProcessCommandLines
50
+
.PARAMETERProcessCommandLine
51
51
Specify a list of command lines to filter on find for the process tokens.
52
-
.PARAMETERTokens
52
+
.PARAMETERToken
53
53
Specify a list token objects.
54
-
.PARAMETERProcesses
54
+
.PARAMETERProcess
55
55
Specify a list process objects to use for their tokens.
56
56
.INPUTS
57
57
None
@@ -68,15 +68,20 @@ Get all ALPC Ports connectable by the process tokens of PIDs 1234 and 5678
0 commit comments