v1.9.4 added Pico providers, Nmi, SiloMonitor and Errata manager callbacks added CmControlVector viewer internal rearrange v1.9.3 updated SeCiCallbacks search for newest Windows versions added Windows Server 2022 support fix win32k ApiSet resolving for Win10 21H2 fix ObCallbacks enumeration issues support for various kernel driver helpers ported to msvc 2022 (with backward compatibility to 2019) bugfixes rtls updated v1.9.2 more Win10/11 21h2 compatibility changes added FLT_FILTER, FLT_OBJECT structured dump added authenticode hash calculation for loaded drivers (extras->Drivers, use popup menu on driver entry) added coalescing callbacks to callbacks list various minor UI changes fix misbehavior with recent wine staging 6.x internal rearrange rtls updated v1.9.1 21h2 compatibility improvements rtls updated v1.9.0 added Section object structured dump added ALPC port connections list (similar to !alpc /lpc windbg command) added MmUnloadedDrivers list added ExCreateCallback list to the callbacks list (PR #26) updated ApiSet plugin now support in place search filter internal rearrange v1.8.8 internal rearrange view security for alpc ports (most of them) security descriptor view dialog (object sid, dacl & sacl) fix scm services list query fix "jump to file may fail under certain conditions" bug various minor UI changes 21h1 compatibility improvements v1.8.7 20h1/20h2/21h1 compatibility improvements added recognizing of shimmed drivers for drivers list (win10+) show process trust label for sections if it present plugins system extended and upgraded to support context plugins added imagescope plugin for section object types backed by imagefile added plugins viewer various minor changes treelist: fix tooltips flickering on Windows 7 turn off Spectre nonsense rtls update v1.8.6 reimplemented directory object dump to output more data added callbacks registered with ExRegisterExtension fix for pipes (PR #17) internal rearrange fix high cpu usage for splitter drag (report/fix by RamMerlabs) fix security dialog regression (reported by RamMerlabs) v1.8.5 fix object cookie add error log 20h1/20h2 compatibility improvements v1.8.4 support of additional helper driver fix Windows 7 regressions v1.8.3 internal rearrange ported to msvc 2019 (with backward compatibility to 2017) fix current directory value for elevated/system re-launch (reported by RamMerlabs) v1.8.2 added Token object properties added PsAltSystemCallHandlers to callbacks dialog fix High DPI issues fix Pipe security dialog not shown where available fix multiple Wine/Wine Staging misbehavior corrected typo in DebugObject description more 20H1 support changes various minor changes v1.8.1 19H2 support Preliminary 20H1 support v1.8.0 improved run as localsystem feature added plugin subsystem added example plugin added Sonar plugin - NDIS protocols viewer added ApiSetView plugin - ApiSetSchema viewer (supported v2, v4, v6) v1.7.4 added software licensing cache view (extras) resolve apisets while viewing shadow table in Windows 10 20H1 >= 18890 builds fix displaying sid user/domain information for private namespaces added refresh (f5) for private namespace dialog v1.7.3 threads list in processes dialog view file properties for KisServiceTable/W32pServiceTable dialogs process/thread/token object properties dialogs bugfixes v1.7.2 symbolic link object dump internal fixes after profiling support for 19H1 SeCiCallbacks scan added and updated more object type descriptions v1.7.1 SeCiCallbacks/g_CiCallbacks, DbgkLmdCallbacks added to the callbacks viewer Session object view and access rights, merge pull request #8 #9 fixed regression added in 1.7.0 treelist updated v1.7.0 code can now be compiled as C++ added W32pServiceTable view added process list dialog (extras) added Callback object type callbacks list (Properties->Object) added callbacks viewer for certain callback types (registry, ps, ob, kebugcheck, se, dbg, po, io etc) reimplemented "type" object type view (added missing fields from w10+) reimplemented service tables extraction code v1.6.0 ported to msvc 2017 (with backward compatibility to 2015) reimplemented private namespaces lookup object directory dump reflect Win10 changes added alpc port dump and additional dialog treelist control updated private namespaces dialog updated usershareddata dialog updated internal rearrange merge pull request #7, fix Job object process list display multiple Wine Staging fixes rtls updated v1.5.5 tweaked PTL display v1.5.4 added display of Process Trust Label for Directory object type v1.5.3 OpenWindowStation fix v1.5.2 internal rearrange v1.5.1 bugfixes v1.5.0 added Partition, DxgkCurrentDxgProcessObject objects description added mailslots viewer dialog added file properties for drivers (menu -> extras -> Drivers) added FltConnectionPort object dump switched to hde instead of ldasm fixed Wine behavior along with some bugs rtls updated, switched to VS2015 U3 note: Windows 10 RS2 (15063), RS1 (14393) supported as well as TH1(10240)/TH2(10586), RS3 supported (16288+ build) v 1.4.0 drivers list and dump (menu -> extras) kiservicetable dump for all supported Windows versions some code revision and corrections v 1.3.0 official support for Windows 10 private namespaces (menu -> extras) v 1.2.0 added KUSER_SHARED_DATA dump (menu -> extras) code revision and corrections ported to msvc 2015 v 1.1.0 added popup menu for Process page added file properties dialog for Process page added descriptions for more object types added named pipes dialog (menu -> extras) added information for IoCompletion object type, including structured object body dump2 some code revision and corrections v 1.0.0 (Feb 23, 2015) initial release