Win32_Process examples–test command line
Published January 20, 2014To see the command lines that have been used when processes are started is simple one liner:
Get-CimInstance -ClassName Win32_Process | select Name, CommandLine
If you want to investigate specific processes use the –Filter parameter to restrict the processes
Leave a Reply
You must be logged in to post a comment.