Abstract: In certain embodiments, a system includes a target server operable to receive commands via an operating system interface. The target server is also operable to run a plurality of processes, a plurality of child processes, and a plurality of threads. The system also includes a diagnostic server, including one or more processors. The diagnostic server is operable to establish a connection to the target server via the operating system interface. The diagnostic server is further operable to identify a process of the plurality of processes running on the target server. The diagnostic server is further operable to identify a child process of the process from the plurality of child processes. The diagnostic server is further operable to identify one or more threads of the plurality of threads associated with one or more of the process and the child process.