Feature Request: Add Command-Line Interface (CLI) Support

[KaosPrinz]

Description of the feature, modification, idea or suggestion

Hello System Informer Team,

First of all, thank you for your outstanding work on System Informer! The tool is incredibly powerful and useful for advanced Windows users and administrators.

Feature request:
I would like to suggest adding a command-line interface (CLI) to System Informer. A CLI would enable users to automate tasks such as listing, closing, or duplicating handles, terminating processes, and querying detailed process information-all without needing to use the graphical user interface.

Why this would be helpful:

Automation: Allows scripting and integration into automation workflows (e.g., with PowerShell or batch scripts).

Remote administration: Makes it easier to perform tasks on remote systems via SSH or other remote shells.

Accessibility: Useful for headless environments or when the GUI is not available.

Advanced usage: Enables power users to combine System Informer’s advanced features with other tools.

Possible features for the CLI:

List processes, services, and handles

Close or duplicate handles by PID, name or handle value

Terminate or suspend processes

Query detailed information about processes, threads, and modules

I believe this would make System Informer even more versatile and valuable for the community.

Thank you for considering this suggestion!

Best regards,
KaosPrinz

Proposed implementation details (optional)

No response

[dmex]

There's already an advanced CLI for all the above provided by Google for PowerShell

Install the module:

Install-Module NtObjectManager -Scope CurrentUser

List all the commands:

Get-Command -Module NtObjectManager

Show detailed information for each command:

Get-Help Get-NtProcess

If you input a full stop, press CTRL+SPACE to view all the variables/commands available for the object:

(get-ntprocess -name explorer.exe).

Here's a script I wrote for injecting a DLL using APC or Thread injection:
https://gist.github.com/dmex/8880b31a0c9bba5c211c020506b90be1

NtObjectManager has all the same information as System Informer and hundreds of commands for interacting with the Native API from PowerShell which is great for scripting:

[KaosPrinz]

Thank you dmex,

but PowerShell can only list and close handles in my own user scope. SystemInformer allows to also close PPL protected handles.

[dmex]

PowerShell can only list and close handles in my own user scope.

Enable SeDebugPrivilege for Powershell using the command:

Set-NtTokenPrivilege SeDebugPrivilege

SystemInformer allows to also close PPL protected handles.

Nope?

[jxy-s]

What @dmex said - System Informer does not and will not allow you to close PPL protected handles.