header image

Get-Process in PowerShell 4

Posted by: | November 28, 2013 | No Comment |

If you use Get-Process in PowerShell v3

£> Get-Process powershell

Handles  NPM(K)    PM(K)      WS(K) VM(M)   CPU(s)     Id ProcessName
——-  ——    —–      —– —–   ——     — ———–
    516      17    49436      59220   233     8.86   7100 powershell

 

PowerShell v4 enables you to see the user account associated with the process

£> Get-Process powershell -IncludeUserName

Handles      WS(K) VM(M)   CPU(s)     Id UserName          ProcessName
——-      —– —–   ——     — ——–          ———–
    593     214888   823    17.27   2148 MANTICORE\richard powershell

 

Now we have an easy way to discover who started a process

under: PowerShell v4