- process name;
- process identifier (PID);
- path to the executable file;
- name and identifier of the parent process;
- user name of the process owner, SID;
- runtime (native code / CLR .NET);
- type of process (32-bit / 64-bit);
- use of DEP, ASLR;
- list of used dynamic libraries (DLL).
- integrity level;
- privileges.
- access control list (ACL);
- file owner;
- level of integrity.