Graham Lee iamleeg

📬

New mailing list for software engineering discussion: https://sicpers.curated.co

Helping programmers to become software engineers. https://sicpers.info

anonymous / gist:6104295

Created July 29, 2013 13:27

	This script:

	syscall::open*:entry
	/execname == "login"/
	{ printf("%s %s", execname, copyinstr(arg0));
	ustack(); }

	Yields these results (among others):

	CPU ID FUNCTION:NAME