TASKLIST
TaskList displays all running applications and services with their Process ID (PID) This can be run on either a local or a remote computer.
(Under Win NT 4 use the resource kit tool TList.)
Syntax
tasklist options
Key
/s computer Specify the name or IP address of a remote computer
(do not use backslashes). The default is the local computer.
/u domainuser [/p password]]
Run under a different account
/fo {TABLE|LIST|CSV}]
Output format, the default is TABLE.
/nh No Headers in the output (does not apply to LIST output)
/fi FilterName [/fi FilterName2 [ … ]]
Apply one of the Filters below:
Status eq, ne RUNNING|NOT RESPONDING
Imagename eq, ne String
PID eq, ne, gt, lt, ge, le Positive integer.
Session eq, ne, gt, lt, ge, le Any valid session number.
SessionName eq, ne String
CPUTime eq, ne, gt, lt, ge, le Time hh:mm:ss
MemUsage eq, ne, gt, lt, ge, le Any valid integer.
Username eq, ne User name ([Domain]User).
Services eq, ne String
Windowtitle eq, ne String
Modules eq, ne String
/m [ModuleName] | /svc | /v
/m Show the processes that include the given module.
/svc List all info for each process without truncation.
Valid when /fo=TABLE. Cannot be used with /m or /v
/v Verbose task informationExamples:
tasklist /v /fi "STATUS eq running"
tasklist /v /fi "username eq ORACLE_SERVICE_ACCOUNT"
WMI
WMIC can also list running processes and parameters
e.g.
WMIC /OUTPUT:C:ProcList.txt PROCESS get Caption,Commandline,Processid