Show loader snaps

The Show loader snaps flag captures detailed information about the loading and unloading of executable images and their supporting library modules and displays the data in the kernel debugger console.

Abbreviation	sls
Hexadecimal value	0x2
Symbolic Name	FLG_SHOW_LDR_SNAPS
Destination	System-wide registry entry, kernel flag, image file registry entry

Comments

For system-wide (registry or kernel flag), this flag displays information about driver loading and unloading operations.

For per-process (image file), this flag displays information about loading and unloading of DLLs.