VQL Reference Windows threads threads Plugin Arg Description Type pid The PID to get the thread for. int64 (required) Required permissions: MACHINE_STATE Description Enumerate threads in a process.