The documentation repeatedly states that “windows_shared_memory has no kernel persistence and is destroyed when all processes using that shared memory are gone.”

 

But I’m trying to find out what exactly is used for the implementation of winows_shared_memory?  Is it implemented internally as a Windows named pipe?  Is it based on using ReadProcessMemory?  Anyone know?

 

Brent Arias

Software Architect

Lumension Security

Tel ~ (602) 692-8088

Fax ~ (480) 970-6323

brent.arias@lumension.com