The Tasklist utility displays a list of applications and services with their Process IDs (PID) for all tasks running on either a local or a remote computer. It is packaged with Windows operating systems and can be executed from the command-line interface.
| Technique | Procedure example |
|---|---|
| T1007 System Service Discovery |
Tasklist can be used to discover services running on a system. |
| T1057 Process Discovery |
Tasklist can be used to discover processes running on a system. |
| T1518.001 Security Software Discovery |
Tasklist can be used to enumerate security software currently running on a system by process name of known products. |
Data from MITRE ATT&CK® (Enterprise). ATT&CK® is a registered trademark of The MITRE Corporation.
