A system, method and interface for consistently capturing kernel resident
information are provided. An operating system architecture includes user
mode modules and kernel mode applications. A user mode module initiates a
kernel mode information request through an application program interface
identifying one or more process threads of interest. A kernel mode module
captures information corresponding to standard kernel mode information
and corresponding to the specifically identified process threads. The
information is returned in a pre-allocated buffer.
