A Deep Dive into Processes, Threads, Fibers, and Jobs on Windows
Processes and threads are the foundation almost every other user-mode mechanism is built on, so getting a clear mental model of them pays off across debugging, performance work, and security. Windows exposes a clean API for all of this, yet the topic stays murky for most people - the genuinely interesting parts (the kernel structures, the scheduler, the exotic process types) are sparsely documented and scattered. This post is the tour I wish I’d had. Rather than restating the API reference, it builds the concepts up, shows the kernel structures behind each one, and the part most write-ups skip points you at how to see all of it on a live system with WinDbg or Process Explorer. We’ll also cover the fiber and job APIs that sit on top, and bring a few details up to date (WSL2, Windows containers) that older treatments predate. ...