blog.sornram9254.com
Answer:How to get the command that invoked a task with tasklist
CMD wmic process get commandline,processid /format:csv PowerShell Get-WmiObject win32_process | select CreationDate,ProcessId,CommandLine|ft -AutoSize
