Windows sysinternals

Chapter 14 System Information Utilities 363
FIGURE 14-9 WinObj.
The sortable table in the right pane lists each object’s name and type; for symbolic links, the
SymLink column identifies the link target. Click any column header to sort the object list by
that column. Next to each object’s name is an icon corresponding to the object type:
■ Mutexes (mutants) are indicated with a padlock.
■ Sections (Windows file-mapping objects) are shown as a memory chip.
■ Events are shown as an exclamation point in a triangle.
■ KeyedEvents have the same icon as Events with a key overlaid.
■ Semaphores are indicated with an icon that resembles a traffic signal.
■ Symbolic links are indicated with a curved arrow.
■ Devices are represented with a desktop computer icon.
■ Drivers are represented with gears on a page (like the standard icon for .sys files).
■ Window Stations are represented with a video monitor icon.
■ Timers are represented with a clock.
■ Gears indicate other objects, such as ALPC ports and jobs.
To view more information about a directory or an object, right-click it and choose
Properties. Double-clicking an object will also display its Properties dialog box (as shown in
Figure 14-10), unless it is a Symbolic Link: double-clicking a symbolic link navigates to the
link target.
www.it-ebooks.info