Last Updated on August 1, 2021 by Admin 2
Which of the following represents a single set of sequential machine-code instructions that the processor executes?
A thread represents a single set of sequential machine-code instructions that the processor executes. A thread also may be thought of as a subset of a process, as a process may have multiple threads. Multithreading is when the processor can operate on more than one thread at a time.
A process is a single application as seen from the perspective of the processor. Multithreading is the operation of more than one process at a time.
Handles are logical associations with a shared resource like a file. When a thread opens a file, it establishes a “handle” to the file.
A fork is an operation whereby a process creates a copy of itself. The fork operation creates a separate address space for the child. The child process has an exact copy of all the memory segments of the parent process.
Objective: Host-Based Analysis
Sub-Objective: Define these terms as they pertain to Microsoft Windows: Processes, threads, memory allocation, Windows Registry, WMI, Handles, Services