Abstract: Subsequent to a loading of an application program within a first memory space, a first buffer is established within a second memory space and a second buffer is established within a third memory space. The first buffer is operated to store information corresponding to an execution of the application program. The second buffer is operated to store information corresponding to an operating system supporting the execution of the application program. Additionally, a third buffer is established within a fourth memory space, the third buffer being operated to store information indicative of the second memory space and the third memory space to thereby facilitate an examination of the first buffer and the second buffer without any cooperation from the application program and the operating system.