Hi Hugh,
didn't look at all the details, but several things are not clear to me: - what is the application we need refer to? it's not 100% clear its the first application attached to console, as this is not only used at conhost startup, but during all lifetime (for also saving the properties); add to make things simple, the app could have terminated, or some other could have been created - attached to the same console - according to https://devblogs.microsoft.com/commandline/understanding-windows-console-hos..., both title and process' path could be used; it's not clear why one of the two is used (load & store) (or said in another words, why the configuration based on console's title isn't sufficient?) - another question: do we need to modify the server protocol here? assuming conhost parent's process is the one of interest, NtQueryInformationProcess + ProcessBasicInformation would get you the parent pid