Object Manager Plus

[DartVanya]

• Implement properties support for Object Manager

  • Standard System Informer handle properties window for Windows objects (including Directories).
  • Add support for missing object types: Device, EventPair, Timer, Semaphore, FilterConnectionPort
  • [System Informer] Add target link info for Symbolic links
  • Fix Directory handles leaking
  • [ET Plugin] Add Windows Object tab to properties window: object attributes and creation time.

• Enhanced Object Manager

  • [System Informer] Add GeneralCallbackHandlePropertiesWindowPreOpen, calls on WM_INITDIALOG and allows plugins to customize general handle properties tab.
  • Display real handles count and hide irrelevant access entry (EtHandlePropertiesWindowPreOpen).
  • Add Symbolic Link Target column
  • Enhanced navigation to symlink: focus to target in ListView.
  • Get object address using KSI

• Defied WinObj: search, statusbar, refresh

  • Implements search using standard SI searchbox: searches all 3 columns (name, type, symlink)
  • Status bar (pseudo) with fullpath to selected object (can copy on righclick menu), current directory object count
  • Refresh button - full rebuild of tree and current dir list

• [System Informer, Plugins] Fixed WM_KEYDOWN forwarding (both for PH and plugins), broken by 5bf7f29#diff-22c39c7de8c6ce2547b9cda41005993a982b12b5f4d567a14ce7e38534c2bf77L1789

  • F5 - refresh, filter will be reapplied after refresh
  • Autosizing of Name column on window resizing.
  • Plugin properties window position will not overwrite generic handle propertines window position setting.

• Add target resolving for Device and ALPC port

  • Renamed Symbolic Link Target column to Target
  • Implemented (experimental) asynchronous resolver for Device and ALPC port targets.
    • Resolving Device driver target. Added menu Go to device driver
    • Resolving ALPC server process target. Added menu Go to process...
  • Rewritten navigaton to symbolic links (and device drivers)

• Add target resolving for Mutant, fix search

  • Improve resolver. Added mutant client owner to target and menu Go to thread...
  • Improve filter: it now stay when changing directory. If selected entry match it stay selected and visible when performing search.
  • Tri-state column sort now saved and loaded from settings (ObjectManagerWindowListSort). Sort now works correctly on directory or filter change.
  • Enter - open properties, Ctrl+Enter - open security, Shift+Enter or Shift+Dblclk on symlink opens its properties.

• Support for open symlink target in explorer

• Show Job process list in target column

• Add CpuPartition type support and icons for more types

  • Add icon for Job, Semaphore, FilterConnectionPort, CpuPartition, Partition

New Object Handles page in properties

• Old Windows Object page entries moved to general page in "Basic information" block. Windows Object replaced with Handles page.
• Menu - Go to process... supported
• Now opens real objects for ALPC Port, FilterConnectionPort, Key (\REGISTRY) using new method (credits to https://github.com/zodiacon/ObjectExplorer)
• Show additional handles for ALPC Port, Device, Key (match by object name). Extra entries will be highlight with ColorInheritHandles)

[phlib, kphlib] Add PhOpenDevice. And Oject Manager Plus FINAL

• My first attempt in kernel programming. Add PhOpenDevice -> KphOpenDevice. Opens Device object handle and optional Device Driver handle. Can open lowest or topmost device from stack.
• Propertines - Device driver info: show topmost and lowest drivers in stack
• Directory list: allow multiselect, Ctrl+A, Ctrl+C support. Menu Copy Full Name (for list and tree).
• [Theme General] ListVew: fix text readability for hot and selected colored items.
  TreeNew: significantly improve visibility of selected item.

[jxy-s]

Awesome work! I'll help give an in-depth review when I have some cycles. Some initial feedback on the video you provided (thanks for that it's very helpful). I wonder if it makes sense to change the "Symbolic Link Target" column to a more generic "Target" column to show information/names of things more broadly? I'm thinking, for example, you could show the name for named object or the device for filter ports. Instead of only showing symbol link names.

[DartVanya]

Awesome work! I'll help give an in-depth review when I have some cycles. Some initial feedback on the video you provided (thanks for that it's very helpful). I wonder if it makes sense to change the "Symbolic Link Target" column to a more generic "Target" column to show information/names of things more broadly? I'm thinking, for example, you could show the name for named object or the device for filter ports. Instead of only showing symbol link names.

Add target resolving for Device and ALPC port

• Renamed Symbolic Link Target column to Target
• Implemented (experimental) asynchronous resolver for Device and ALPC port targets.
  • Resolving Device driver target. Added menu Go to device driver
  • Resolving ALPC server process target. Added menu Go to server process
• Rewritten navigaton to symbolic links (and device drivers)

Add target resolving for Mutant, fix search

resolver_test.mp4