Heretek Labs / Process Atlas
Back to Labs

Interactive controls are loading. If they remain disabled, enable JavaScript or reload this page.

Process Atlas

How Windows turns a program into a running process.

SYSTEM VIEW

Inspect a component and its connections.

PROGRAM → PROCESS → EXECUTION → EXIT3D SCHEMATIC
Move camera

Drag to orbit · Shift-drag or right-drag to pan · scroll to zoom. Keyboard: arrows orbit, Shift + arrows pan, + / − zoom, R fits the model.

Request / execution routeResource relationship01Component + anchored label

CONNECT THE DETAILS

MAKE IT PART OF YOUR NOTES

What changed, and why?

In your own words: what does a handle give B, and what does mapping a view add?

Your observations stay in this browser when storage is available. Export them to keep a portable copy with your study notes.

Maximum 20,000 characters. Changes save immediately when browser storage is available.

0 / 20,000 characters

Ready to save your observations.

Sources & model limits

This educational model covers processes, threads, memory, access tokens, privileges and termination. Its scope follows the Processes unit of Red Team Ops (CRTO I), a course by Zero-Point Security; the course labels in the lessons point to that unit. Process Atlas is an independent study aid. It is not affiliated with or endorsed by Zero-Point Security, it does not reproduce course text, and no course access is needed. The editor story and the 3D layout are teaching examples.

Primary references: Processes and threads, Access tokens, Privilege constants, Termination, Named shared memory, MapViewOfFile, HeapReAlloc.

Rendering uses Three.js r160 by the Three.js authors, included under the MIT license. The downloadable HTML edition works offline. Source links require internet. Observations stay in your browser; export a note or checkpoint to move them between devices.

Your export

Save this file with your notes. You can also select and copy the text below.

Download file

Review both explanation copies

These copies are kept separately. Choosing one does not delete the saved recovery copy. Download both if you want a portable backup.

Review the checkpoint before replacing your explanation

Your current explanation and the incoming one differ. A recovery copy will be kept before replacing it.