Supported object types

Windows object types supported by WiTS include:

  • System information
  • Processors
  • Processes
  • Services
  • Drives and volumes
  • Users and groups
  • Logon sessions
  • Local and remote shares
  • Network interfaces
  • Network connections
  • Network routing tables
  • Windows event log
  • Modules and dynamic link libraries
  • Kernel drivers

These objects have various properties associated with them. These properties may be

  • Scalar values, an example being the amount of virtual memory being consumed by a process
  • A reference to another object; for example, the user account under which a process is running is itself an object
  • A list of the above. For instance, the group accounts to which a user account belongs is a list of object references.

All references objects, whether single or a list, show up as navigational links.

Windows Inspection Tool Set V3.2