5 ms·
What about using something like TCPView[1], and Process Explorer[2]? Saying that there's "no good way" is throwing in the towel a bit early. [1] https://techne
by Varriount 10y ago
What about using something like TCPView[1], and Process Explorer[2]? Saying that there's "no good way" is throwing in the towel a bit early.
[1] https://technet.microsoft.com/en-us/sysinternals/tcpview.aspx https://technet.microsoft.com/en-us/sysinternals/tcpview.asp...
[2] https://technet.microsoft.com/en-us/sysinternals/processexplorer.aspx https://technet.microsoft.com/en-us/sysinternals/processexpl...
- mysterydip 10y agoIf it's the OS doing the data gathering, it can just hide that stuff from whatever you would use to monitor it. Look at how rootkits hide for an example.
- sqldba 10y agoNot to mention they bypass their own hosts file to make sure you don't override anything that might stop their data theft.
- antsar 10y agoThose tools rely on Microsoft-developed APIs to monitor traffic though... A monitoring device connected along the network path would be more trustworthy.