Hi Is it possible to get the parent process name if I provide a process name? So if I provide RAVBg64.exe I will get the processname that actually calls this process.

Hi Is it possible to get the parent process name if I provide a process name? So if I provide RAVBg64.exe I will get the processname that actually calls this process.

Start with the below PS command:

get-wmiobject -class Win32_Process | where {$_.name -like "your image name.exe"} | select -property ParentProcessId,Name | fl

• Proposed as answer by Chen VMVP 19 hours 58 minutes ago

Hi, this actually giving me only the Parent process ID, but not parent process name

Hi, this actually giving me only the Parent process ID, but not parent process name

Hi,

You can use a calculated property to get that information:

Get-WmiObject Win32_Process | 
    Where {$_.Name -eq 'blah.exe'} | 
        Select ParentProcessId,@{N='ParentProcessName';E={(Get-Process -Id $_.ParentProcessId).Name}}

Hi Is it possible to get the parent process name if I provide a process name? So if I provide RAVBg64.exe I will get the processname that actually calls this process.

Start with the below PS command:

get-wmiobject -class Win32_Process | where {$_.name -like "your image name.exe"} | select -property ParentProcessId,Name | fl

• Proposed as answer by Chen VMVP Friday, August 21, 2015 11:11 AM

Hi Is it possible to get the parent process name if I provide a process name? So if I provide RAVBg64.exe I will get the processname that actually calls this process.

Start with the below PS command:

get-wmiobject -class Win32_Process | where {$_.name -like "your image name.exe"} | select -property ParentProcessId,Name | fl

• Proposed as answer by Chen VMVP Friday, August 21, 2015 11:11 AM
• Marked as answer by Elaine JingMicrosoft contingent staff, Moderator 20 hours 35 minutes ago
• Unmarked as answer by Elaine JingMicrosoft contingent staff, Moderator 20 hours 34 minutes ago