Tasklist

The Tasklist utility displays a list of applications and services with their Process IDs (PID) for all tasks running on either a local or a remote computer. It is packaged with Windows operating systems and can be executed from the command-line interface. [1]

ID: S0057
Type: TOOL
Platforms: Windows

Version: 1.0

Techniques Used

DomainIDNameUse
EnterpriseT1057Process DiscoveryTasklist can be used to discover processes running on a system.[1]
EnterpriseT1063Security Software DiscoveryTasklist can be used to enumerate security software currently running on a system by process name of known products.[1]
EnterpriseT1007System Service DiscoveryTasklist can be used to discover services running on a system.[1]

Groups

Groups that use this software:

APT1
Deep Panda
Honeybee
Ke3chang
Naikon
OilRig
Turla

References