Processes and threads
NT has two types of process-related objects: processes and threads.
A process corresponds to a user job or application that owns resources, such as memory, and files. A thread is dispatchable unit of work that executes sequentially and is interruptible.
NT kernel does not maintain any relationship among the processes that it creates, including parent-child relationship.
NT process must contain at least one thread to execute. This thread may then create other threads.