Re: memory, PE files, etc...

2014-10-29 Thread Tim Golden
On 29/10/2014 02:18, Denis McMahon wrote: On Mon, 27 Oct 2014 10:16:43 -0700, kiuhnm03 wrote: I'd like to write one or more scripts that analyze processes in memory on Windows 7. I used to do these things in C++ by using native Win32 API calls. How should I proceed in python? Any pointers?

Re: memory, PE files, etc...

2014-10-28 Thread gandalf23
On Tuesday, October 28, 2014 3:37:19 AM UTC+1, Rustom Mody wrote: On Tuesday, October 28, 2014 12:41:40 AM UTC+5:30, kiuh...@yahoo.it wrote: On Monday, October 27, 2014 6:24:19 PM UTC+1, Tim Golden wrote: psutil is definitely your friend: https://github.com/giampaolo/psutil

Re: memory, PE files, etc...

2014-10-28 Thread Denis McMahon
On Mon, 27 Oct 2014 10:16:43 -0700, kiuhnm03 wrote: I'd like to write one or more scripts that analyze processes in memory on Windows 7. I used to do these things in C++ by using native Win32 API calls. How should I proceed in python? Any pointers? This seems to be a very common request.

Re: memory, PE files, etc...

2014-10-28 Thread Chris Angelico
On Wed, Oct 29, 2014 at 1:18 PM, Denis McMahon denismfmcma...@gmail.com wrote: On Mon, 27 Oct 2014 10:16:43 -0700, kiuhnm03 wrote: I'd like to write one or more scripts that analyze processes in memory on Windows 7. I used to do these things in C++ by using native Win32 API calls. How should

memory, PE files, etc...

2014-10-27 Thread kiuhnm03
Hi! I'd like to write one or more scripts that analyze processes in memory on Windows 7. I used to do these things in C++ by using native Win32 API calls. How should I proceed in python? Any pointers? -- https://mail.python.org/mailman/listinfo/python-list

Re: memory, PE files, etc...

2014-10-27 Thread Tim Golden
On 27/10/2014 17:16, kiuhn...@yahoo.it wrote: Hi! I'd like to write one or more scripts that analyze processes in memory on Windows 7. I used to do these things in C++ by using native Win32 API calls. How should I proceed in python? Any pointers? psutil is definitely your friend:

Re: memory, PE files, etc...

2014-10-27 Thread kiuhnm03
On Monday, October 27, 2014 6:24:19 PM UTC+1, Tim Golden wrote: psutil is definitely your friend: https://github.com/giampaolo/psutil Although WMI can be quite handy too, depending on what you're trying to do: http://timgolden.me.uk/python/wmi/ TJG Thanks for answering. I don't

Re: memory, PE files, etc...

2014-10-27 Thread Rustom Mody
On Tuesday, October 28, 2014 12:41:40 AM UTC+5:30, kiuh...@yahoo.it wrote: On Monday, October 27, 2014 6:24:19 PM UTC+1, Tim Golden wrote: psutil is definitely your friend: https://github.com/giampaolo/psutil Although WMI can be quite handy too, depending on what you're trying to