Processus | PID | Image | Processus Parent | Propriétaire | SessionID
| -- | -- | -- | -- | -- | -- |
| System | 4 | C:\Windows\System32\ntoskrnl.exe | 0 | SYSTEM | 0 |
| Smss.exe | 248 | C:\Windows\System32\smss.exe | 4 | SYSTEM | 0 |
| Csrss.exe | 336 | C:\Windows\System32\csrss.exe | 328 | SYSTEM | 0 |
| Wininit.exe | 424 | C:\Windows\System32\wininit.exe | 328 | SYSTEM | 0 |
| Ntoskrnl.exe | 4 | C:\Windows\System32\ntoskrnl.exe | 0 | SYSTEM | 0 |
| Lsass.exe | 640 | C:\Windows\System32\lsass.exe | 532 | SYSTEM | 0 |
| Svchost.exe | 740, 936... | C:\Windows\System32\svchost.exe | 532 | SYSTEM | 0 |
| Winlogon.exe | 3736 | C:\Windows\System32\winlogon.exe | 3348 | SYSTEM | 5 |
| Explorer.exe | 3540 | C:\Windows\explorer.exe | 2576 | Administrator | 5 |
| Winload.exe | | | | | |

L5/L7 | app | ... | F4P | NF5 | ... | |
| --- | - | - | - | - | - | - |
L4 | TCP | UDP