Bewerken

Delen via

!session

  • Artikel

The !session extension controls the session context. It can also display a list of all user sessions.

Syntax

!session 
!session -s DefaultSession 
!session -?

Parameters

-s **** DefaultSession
Sets the session context to the specified value. If DefaultSession is -1, the session context is set to the current session.

-?
Displays help for this extension in the Debugger Command window.

DLL

Kdexts.dll

Additional Information

For information about user sessions and the Session Manager (smss.exe), see Microsoft Windows Internals, by Mark Russinovich and David Solomon.

Remarks

The !session extension is used to control the session context. Using !session with no parameters will display a list of active sessions on the target computer. Using !session /s DefaultSession will change the session context to the new default value.

When you set the session context, the process context is automatically changed to the active process for that session, and the .cache forcedecodeptes option is enabled so that session addresses are translated properly.

For more details and a list of all the session-related extensions that are affected by the session context, see Changing Contexts.