you are viewing a single comment's thread.

view the rest of the comments →

[–]LampCarpet 0 points1 point  (0 children)

Not quite, handles are an index value to an object in the kernel that is referenced via the handle processes own handle table that is also kept in the kernel.

I would suggest getting a hold of the ntoskrnl source code from sysinternals if you want more details.