Re: memory, PE files, etc...

Path	csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed2.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail
Return-Path	<mail@timgolden.me.uk>
X-Original-To	python-list@python.org
Delivered-To	python-list@mail.python.org
X-Spam-Status	OK 0.001
X-Spam-Evidence	'H': 1.00; 'S': 0.00; 'scripts': 0.03; 'win32': 0.03; 'calls.': 0.09; 'subject:files': 0.09; 'url:github': 0.09; 'api': 0.11; 'windows': 0.15; 'friend:': 0.16; 'from:addr:timgolden.me.uk': 0.16; 'from:name:tim golden': 0.16; 'message-id:@timgolden.me.uk': 0.16; 'received:74.55.86': 0.16; 'received:74.55.86.74': 0.16; 'received:smtp.webfaction.com': 0.16; 'received:webfaction.com': 0.16; 'tjg': 0.16; 'url:timgolden': 0.16; 'wmi': 0.16; 'wrote:': 0.18; 'trying': 0.19; 'memory': 0.22; 'python?': 0.22; 'header:User-Agent:1': 0.23; 'received:192.168.100': 0.24; 'header:In-Reply-To:1': 0.27; 'quite': 0.32; 'url:python': 0.33; 'proceed': 0.33; "i'd": 0.34; 'c++': 0.36; 'should': 0.36; 'to:addr:python-list': 0.38; 'to:addr:python.org': 0.39; 'how': 0.40; 'analyze': 0.60; "you're": 0.61; 'more': 0.64; 'url:me': 0.69; 'from:addr:mail': 0.83; 'do:': 0.91
Date	Mon, 27 Oct 2014 17:23:17 +0000
From	Tim Golden <mail@timgolden.me.uk>
User-Agent	Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.0
MIME-Version	1.0
To	python-list@python.org
Subject	Re: memory, PE files, etc...
References	<49c92881-e8bf-4e80-9e4d-8b88c0d12133@googlegroups.com>
In-Reply-To	<49c92881-e8bf-4e80-9e4d-8b88c0d12133@googlegroups.com>
Content-Type	text/plain; charset=ISO-8859-1
Content-Transfer-Encoding	7bit
X-BeenThere	python-list@python.org
X-Mailman-Version	2.1.15
Precedence	list
List-Id	General discussion list for the Python programming language <python-list.python.org>
List-Unsubscribe	<https://mail.python.org/mailman/options/python-list>, <mailto:python-list-request@python.org?subject=unsubscribe>
List-Archive	<http://mail.python.org/pipermail/python-list/>
List-Post	<mailto:python-list@python.org>
List-Help	<mailto:python-list-request@python.org?subject=help>
List-Subscribe	<https://mail.python.org/mailman/listinfo/python-list>, <mailto:python-list-request@python.org?subject=subscribe>
Newsgroups	comp.lang.python
Message-ID	<mailman.15240.1414430640.18130.python-list@python.org> (permalink)
Lines	15
NNTP-Posting-Host	2001:888:2000:d::a6
X-Trace	1414430640 news.xs4all.nl 2860 [2001:888:2000:d::a6]:60046
X-Complaints-To	abuse@xs4all.nl
Xref	csiph.com comp.lang.python:79798

Show key headers only | View raw

On 27/10/2014 17:16, kiuhnm03@yahoo.it wrote:
> Hi! I'd like to write one or more scripts that analyze processes in
> memory on Windows 7. I used to do these things in C++ by using native
> Win32 API calls. How should I proceed in python? Any pointers?
> 

psutil is definitely your friend:

  https://github.com/giampaolo/psutil

Although WMI can be quite handy too, depending on what you're trying to do:

  http://timgolden.me.uk/python/wmi/

TJG

Thread

memory, PE files, etc... kiuhnm03@yahoo.it - 2014-10-27 10:16 -0700
  Re: memory, PE files, etc... Tim Golden <mail@timgolden.me.uk> - 2014-10-27 17:23 +0000
    Re: memory, PE files, etc... kiuhnm03@yahoo.it - 2014-10-27 12:11 -0700
      Re: memory, PE files, etc... Rustom Mody <rustompmody@gmail.com> - 2014-10-27 19:37 -0700
        Re: memory, PE files, etc... gandalf23@mail.com - 2014-10-28 05:15 -0700
  Re: memory, PE files, etc... Denis McMahon <denismfmcmahon@gmail.com> - 2014-10-29 02:18 +0000
    Re: memory, PE files, etc... Chris Angelico <rosuav@gmail.com> - 2014-10-29 13:25 +1100
    Re: memory, PE files, etc... Tim Golden <mail@timgolden.me.uk> - 2014-10-29 09:29 +0000

csiph-web