Techibee.com

Get information about remote process using powershell

Today I came across a requirement to gather information about the process running in remote computer. Basically I want to know when the process is started. In this case you can’t use process explorer as it doesn’t have option to connect to remote computer. So, I quickly wrote a small script to get this information.

$myproc = gwmi -Class Win32_Process -ComputerName moose -Filter "caption = 'outlook.exe'"

([wmi]'').ConvertToDatetime($myproc.creationdate)
Exit mobile version