TopToBottomNT has been described as "Task Manager on steroids."
TopToBottomNT displays a summary list of processes, i.e., the "top" of a system, or drivers, the "bottom". Additional summary displays are modules that have been loaded by the currently active processes and registered ActiveX components. Each of these summary displays are sortable by name with additional criteria depending on display type, e.g., processes by creation time or drivers by driver base.
Detailed information on each type in the format of a tabsheet window is available by selecting and double-clicking an item. Again, the display will vary depending upon the item type. For processes, one can view:
|
|
|
Module lists are color-coded to indicate items that were not loaded at their default base address, items that where dynamically loaded, and items that are .NET managed assemblies.
When the type is module, the following information is available:
|
|
|
When the type is ActiveX, the following information is available:
|
|
|
When the type is kernel module, the following information is available:
|
|
|
Finally, there is a user tree display, that associates active processes with the user SID that was used to start the process.
Screenshot:
Download TopToBottomNT.