GuidedHacking
patreon
Windows Process Types Explained
🕑 Added 2023-04-20 17:13:08 +0000 UTCIn contrast to traditional Windows processes, pico processes do not have direct access to the Windows NT kernel. Instead, they are managed by a special kernel-mode driver called the pico provider (Lxss.sys and LxCore.sys in the case of WSL). The pico provider is responsible for translating Linux system calls made by the pico process into their Windows equivalents, allowing Linux applications to run seamlessly on the Windows platform.
