I've had a good look around for info, and come up short.
Does anyone know of a way to get the thread id under which a service is running, from either safehandle or unsafe handle properties of the object?
wmi with Win32_Service does not appear to provide it, just the Process Id.
I get close to the info I need in C++ after getting TEB address, but cannot figure out how to read and decipher the info.
Thanks for reading, I know it's a real tough one.