Lansweeper can retrieve a list per computer about which processes are active, their executable path, priority, process ID and thread count. Using this report, you can verify if a specific process is running in your network or not. Are you are looking for a specific malicious process that might be hiding on one of your computers? Do you want to keep an eye on that backup and make sure it keeps running, or an antivirus process to make sure it doesn’t get disabled by malware a virus or something else, the report below can help you in many use cases with identifying and keeping an eye on processes.
The report below will provide you with the complete list of assets where processes have been scanned. You can use the filters in at the top of the report to filter the results. You can also fully modify the report, you can filter for a specific process, count them based on other criteria like the priority and much more. Any report can also be combined with email alerts so you can get notified when you need to be.
Before running the audit, enable the “PROCESS” item in the scanned item interval menu.
Computer Processes Overview Query
Select Top 1000000 tblAssets.AssetID,
tblAssets.AssetName,
tblAssets.Domain,
tblAssets.Username,
tblAssets.Userdomain,
Coalesce(tsysOS.Image, tsysAssetTypes.AssetTypeIcon10) As icon,
tblAssets.IPAddress,
tsysIPLocations.IPLocation,
tblAssetCustom.Manufacturer,
tblAssetCustom.Model,
tsysOS.OSname As OS,
tblProcesses.Caption,
tblProcesses.ExecutablePath,
tblProcesses.Priority,
tblProcesses.ProcessID,
tblProcesses.Threadcount,
Case
When tblErrors.ErrorText Is Not Null Or
tblErrors.ErrorText != '' Then
'Scanning Error: ' + tsysasseterrortypes.ErrorMsg
Else ''
End As ScanningErrors,
tblAssets.Lastseen,
tblAssets.Lasttried
From tblAssets
Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
Inner Join tsysIPLocations On tsysIPLocations.LocationID =
tblAssets.LocationID
Inner Join tblState On tblState.State = tblAssetCustom.State
Inner Join tblProcesses On tblProcesses.AssetID = tblAssets.AssetID
Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Left Join (Select Distinct Top 1000000 tblErrors.AssetID As ID,
Max(tblErrors.Teller) As ErrorID
From tblErrors
Group By tblErrors.AssetID) As ScanningError On tblAssets.AssetID =
ScanningError.ID
Left Join tblErrors On ScanningError.ErrorID = tblErrors.Teller
Left Join tsysasseterrortypes On tsysasseterrortypes.Errortype =
tblErrors.ErrorType
Where tblState.Statename = 'Active'
Order By tblAssets.Domain,
tblAssets.AssetName,
tblProcesses.Priority,
tblProcesses.Threadcount
