Skip to content
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Get Running Processes via PowerShell activity

The Get Sensor ID workflow activity gathers running processes using PowerShell to use in the workflow.

The Get Running Processes via PowerShell workflow activity can be used with any workflow to retrieve processes to include in the workflow.

Results

Possible results for this activity are:

ResultDescription
SuccessFound processes
FailureNo processes found. More error information is available in the activity output error.

Input variables

Input variables determine the initial behavior of the activity.

VariableDescription
targetIP or fully-qualified domain name (FQDN) of the target CI.
processingScriptECC script run on a Windows-based system.

Output variables

The output variables contain data that can be used in subsequent activities.

VariableDescription
responseRaw output. Running processes data.

Parent Topic:Security Operations System Command Integration- Get Running Processes flow