Get Running Processes via PowerShell activity

The Get Sensor ID workflow activity gathers running processes using PowerShell to use in the workflow.

The Get Running Processes via PowerShell workflow activity can be used with any workflow to retrieve processes to include in the workflow.

Results

Possible results for this activity are:

Result Description Success Found processes Failure No processes found. More error information is available in the activity output error.

Input variables

Input variables determine the initial behavior of the activity.

Variable Description target IP or fully-qualified domain name (FQDN) of the target CI. processingScript ECC script run on a Windows-based system.

Output variables

The output variables contain data that can be used in subsequent activities.

Variable Description response Raw output. Running processes data.

Parent Topic:Security Operations System Command Integration- Get Running Processes flow