ZwQueryInformationProcess
[DllImport("ntdll.dll", SetLastError = true)]
public static extern int ZwQueryInformationProcess(
IntPtr ProcessHandle,
PROCESSINFOCLASS ProcessInformationClass,
IntPtr ProcessInformation,
uint ProcessInformationLength,
out uint ReturnLength
);
Microsoft documentation: Link
Last updated