date: “2016-12-01” draft: false title: “pslist”
Examples
| command | description |
|---|---|
pslist -d -m |
show thread (d) and memory (m) details |
pslist -x |
both -d and -m |
pslist -t |
show tree view |
pslist -s <S> -r <R> |
taskman mode for S seconds with periodic updates every R seconds |
pslist \\<SYSTEM> /u <USER> /p <PASS> |
remote plist |
Man
pslist
-d Show thread detail.
-m Show memory detail.
-x Show processes, memory information and threads.
-t Show process tree.
-s [n] Run in task-manager mode, for optional seconds specified. Press Escape to abort.
-r n Task-manager mode refresh rate in seconds (default is 1).
\\computer Specifies remote system
-u username on a remote system and the account you are executing in does not have administrative privilege
-p password for remote user. If you specify an account name and omit the -p option PsList prompts you interactively for a password.
name Show information about processes that begin with the name specified.
-e Exact match the process name.
pid shows information about specified PID i.e. pslist 53 would dump statistics for the process with the PID 53.
Memory Abbreviation Key
All memory values are displayed in KB.
Pri Priority
Thd Number of Threads
Hnd Number of Handles
VM Virtual Memory
WS Working Set
Priv Private Virtual Memory
Priv Pk Private Virtual Memory Peak
Faults Page Faults
NonP Non-Paged Pool
Page Paged Pool
Cswtch Context Switches
EXAMPLES
view a process' memory and thread details
pslist -dm or pslist -x
view the parent-child process relationships
pslist -t
View a list of running processes on a remote computer
pslist \\computer -u domain\administrator -p password
```