Path: csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!newsfeed.xs4all.nl!newsfeed2.news.xs4all.nl!xs4all!newsgate.cistron.nl!newsgate.news.xs4all.nl!post.news.xs4all.nl!not-for-mail Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.001 X-Spam-Evidence: '*H*': 1.00; '*S*': 0.00; 'scripts': 0.03; 'win32': 0.03; 'calls.': 0.09; 'subject:files': 0.09; 'url:github': 0.09; 'api': 0.11; 'windows': 0.15; 'friend:': 0.16; 'from:addr:timgolden.me.uk': 0.16; 'from:name:tim golden': 0.16; 'message-id:@timgolden.me.uk': 0.16; 'received:74.55.86': 0.16; 'received:74.55.86.74': 0.16; 'received:smtp.webfaction.com': 0.16; 'received:webfaction.com': 0.16; 'tjg': 0.16; 'url:timgolden': 0.16; 'wmi': 0.16; 'wrote:': 0.18; 'trying': 0.19; 'memory': 0.22; 'python?': 0.22; 'header:User-Agent:1': 0.23; 'received:192.168.100': 0.24; 'header:In-Reply-To:1': 0.27; 'quite': 0.32; 'url:python': 0.33; 'proceed': 0.33; "i'd": 0.34; 'c++': 0.36; 'should': 0.36; 'to:addr:python-list': 0.38; 'to:addr:python.org': 0.39; 'how': 0.40; 'analyze': 0.60; "you're": 0.61; 'more': 0.64; 'url:me': 0.69; 'from:addr:mail': 0.83; 'do:': 0.91 Date: Mon, 27 Oct 2014 17:23:17 +0000 From: Tim Golden User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:24.0) Gecko/20100101 Thunderbird/24.0 MIME-Version: 1.0 To: python-list@python.org Subject: Re: memory, PE files, etc... References: <49c92881-e8bf-4e80-9e4d-8b88c0d12133@googlegroups.com> In-Reply-To: <49c92881-e8bf-4e80-9e4d-8b88c0d12133@googlegroups.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 15 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1414430640 news.xs4all.nl 2860 [2001:888:2000:d::a6]:60046 X-Complaints-To: abuse@xs4all.nl Xref: csiph.com comp.lang.python:79798 On 27/10/2014 17:16, kiuhnm03@yahoo.it wrote: > Hi! I'd like to write one or more scripts that analyze processes in > memory on Windows 7. I used to do these things in C++ by using native > Win32 API calls. How should I proceed in python? Any pointers? > psutil is definitely your friend: https://github.com/giampaolo/psutil Although WMI can be quite handy too, depending on what you're trying to do: http://timgolden.me.uk/python/wmi/ TJG