Find process name of a service using the display name?

1

Does any know the relevance to find the process name of a windows service using the display name?

2

service names of services whose (display name of it as lowercase contains “microsoft”)

Something like that …

2 Likes
3

That’s exactly what I was looking for. Thanks.

4

Is there a similar relevance to find the running process associated with the windows service?

For example, “Bigfix Inventory 10.0.0.0 service” service display name is associated with the “prunsrv.exe” process.

5

I dont have Bigfix Inventory service but maybe something like below if you update the service display name

Q: names of files of services whose (display name of it = "BES Client")
A: BESClient.exe
T: 274.682 ms
I: plural string
1 Like
6

In the case of BFI on Windows, the service is not configured with a file. However, the image path property is available.

Try:

(pid of it as string| "--no pid--", running of it, image path of it) of services whose (display name of it as lowercase contains "inventory")

when running:
6432, True, "D:\Program Files\BigFix Enterprise\BFI\wlp\bin\prunsrv.exe" //RS//BFIserver

when stopped:
--no pid--, False, "D:\Program Files\BigFix Enterprise\BFI\wlp\bin\prunsrv.exe" //RS//BFIserver

2 Likes
7

I"m trying to find process’s name for multiple services through Analyses, but getting error when I use the “OR” operator.

Q: names of files of services whose (display name of it = “service1”) or names of files of services whose (display name of it = “service2”)
E: A boolen expression is required.

8

Play with this:

(display name of it, name of file of it | "--no file---", pid of it as string| "--no pid--", running of it, image path of it) of services whose (display name of it as lowercase contains "inventory" or display name of it as lowercase contains "event")

Remember that not all services have files associated with them.

1 Like
9

That did the trick! Thanks itsmpro92!