Process Atlas
Follow a program from its file on disk into a running process. Explore where Windows participates, what threads execute, and how memory and security fit together.
File on disk
Windows
Running process
Start with Focus mode to inspect one component, then switch to Explore for the connected system.
- Follow execution
- A 3D map of one program’s life: creation, threads, memory, access tokens, privileges and exit. Each stop explains Windows’ role and what the lines connected to it mean.
- Try a memory experiment
- Connect two processes to the same shared bytes one call at a time, with a flat diagram of handles, views and bytes, or replay heap allocation, freeing and a resize that moves a block.
- Apply it
- Ten short scenarios, from launching a process to ending one. Predict the outcome, read the feedback, then explain the reason in your own words.
- Keep your explanation
- Write observations, export a Markdown note or image, and save a checkpoint to resume on another device.
No account needed. Observations stay in your browser; they do not sync automatically. Export a checkpoint to move them between devices or between the website and offline edition.
The offline edition is one HTML file. Save it and open it in a browser; the lab runs without an internet connection.