Today I came across a requirement to gather information about the process running in remote computer. Basically I want to know when the process is started. In this case you can’t use process explorer as it doesn’t have option to connect to remote computer. So, I quickly wrote a small script to get this information.
$myproc = gwmi -Class Win32_Process -ComputerName moose -Filter "caption = 'outlook.exe'" ([wmi]'').ConvertToDatetime($myproc.creationdate)