TASKLIST – Windows CMD Command

TaskList displays all running applications and services with their Process ID (PID) This can be run on either a local or a remote computer.

Image Name is the name of the process or the executable file running the process, often svchost.exe

Filters must be surrounded with double quotation marks, if a filter string itself includes a double quotation mark, this must be escaped with a backslash \” one exception to this is a double quote at the end, which can be matched using a wildcard: *

if a filter string includes a backslash, that can be escaped with a double backslash \\

Home editions of Windows do not have TASKLIST, use QPROCESS instead.

Examples:

List the services running under each process:

TASKLIST /svc

List the services running under each SvcHost process:

TASKLIST /FI "imagename eq svchost.exe" /svc

List the services running now:

TASKLIST /v /fi "STATUS eq running"

List the services with an ImageName that starts with “C” – notice that a wildcard can only be used at the end of the string:

TASKLIST /FI "IMAGENAME eq c*"

List the services running under a specific user account:

TASKLIST /v /fi "username eq SERVICE_ACCT05"

You may also like...

Leave a Reply

Your email address will not be published.