QuestionQ38Verified/Event SearchCopy linkReport a problemAsk AstroTutorSave questionWhen does ContextProcessID have the same value as TargetProcessID?AWhen a process spawns a child process, the child process ID matches the TargetProcessID and the ContextProcessID of the parentBWhen a process spawns a child process, the ContextProcessID of the child will match the TargetProcessID of the parentCWhen a process is suspended, the TargetProcessID will match the ContextProcessIDShow AnswerAnswerExplanationFor a child-process event, ContextProcessID identifies the responsible parent process, so it matches that parent process’s TargetProcessID. This correlation links the child activity back to the process that spawned it.Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion