It's used to enumerate the process oh windows system by creating a snapshot