Recipe 6.7. Viewing the Properties of a ProcessProblemYou want to view the properties of a process. This includes the process executable path, command line, current working directory, parent process (if any), owner, and startup timestamp. SolutionUsing a graphical user interface
Some of this information can also be viewed using Windows Task Manager (taskmgr.exe). After starting taskmgr.exe, click on the Processes tab. Select View Using a command-line interface The tasklist.exe command can display a subset of the properties described in the Problem section. Here is an example that displays properties for a specific process: Another option from the command line is to use wmic to harness the power of WMI. You can retrieve all of the properties defined by the Win32_Process class (see Table 6-3) by running this simple command: You can also limit the output to a single process. The following example retrieves the properties for the snmp.exe process: Recipe 6.1 for a list of Win32_Process properties |