Tool to Show Parent-Child Process Needed - Help! Recommend?

[hjlbx]

Hello,

I use Kaspersky Internet Security.

Part of the Application Control module applies an "Inherit" rule to child processes.

If I set up a rule to "Block" for a file, any child process inherits the "Block" and it breaks the child process.

For example, if I "Block" Windows Explorer on Public Networks, all apps in the Windows file system will inherit this firewall rule.

As you might imagine, this is a problem when I do not know a process' children.

Is there a tool that I can use to show parent-child relationships without executing the apps... so that I can exclude the child processes from inheriting the parent restrictions?

In other words, I'm looking for a file-dependencies tool.

Thanks,

hjlbx

 

[jamescv7]

You may consult this following tools:

1) http://www.ucware.com/apev/
2) http://www.dependencywalker.com/
3) http://www.pe-explorer.com/peexplorer-tour.htm

Happy analyzing!

 

[hjlbx]

You may consult this following tools:

1) http://www.ucware.com/apev/
2) http://www.dependencywalker.com/
3) http://www.pe-explorer.com/peexplorer-tour.htm

Happy analyzing!

Thank You jamescv7... I'm not surprised you jumped in with recommendations.

 

[hjlbx]

I do not have enough knowledge to use the recommended tools.

What I'm searching for is a tool to show file run sequence.

For example,

Windows Explorer -> Internet Explorer; or

The above is from the Kaspersky Internet Security Task Manager. Using it is rough on system resources.

Any suggestions?

Thanks!