How does ntservices probe collect monitoring data from robots

Document ID : KB000098254
Last Modified Date : 25/06/2018
Show Technical Document Details
Question:
how ntservice probe collects the monitoring data on windows servers?
Answer:
The ntservices probe monitors the NT services available on the Windows system where the probe is deployed.
The probe uses Remote Procedure Calls (RPC) to detect which services are running.

For example please see dwCurrentState in link below.
https://msdn.microsoft.com/en-us/library/windows/desktop/ms685996(v=vs.85).aspx

There is a mapping table where the value received from the OS is mapped to a particular value stored inside ntservices probe which is further used as per the design of the probe.
User-added image