
After you’ve run the command, use the same process as above to open the process list file in Notepad. \Process_list.txt parameter puts the file in the path where you run the command, so make note of that path so you know where to find the process list file. To output this information to a file, you need to add the Out-File parameter to the Get-Process command.īack in the Powershell screen, type the command Get-Process | Out-File -FilePath. This is great, but all of this information is displayed on the screen and not to a file.
CPU(s): Processor time used by the process across all processors (in seconds). VM(M): Virtual memory used by the process (in megabytes). WS(K): Pages in memory recently used by the process (in kilobytes). PM(K): Pageable memory the process is using (in kilobytes). Let’s say you’d like to only see the times when the explorer.exe process queried a registry key.
In this box, you can also create, modify and removal rules too.
NPM(K): Non-paged memory the process is using (in kilobytes) In the last section, you saw what the Process Monitor Filter box looked like and viewed all of the rules. Handles: Number of handles that the process has opened. However, you need to know what the headers mean. This provides a little more information about processes than tasklist does.