Neither @PID nor the conditional ISAPP seem to be aware of system processes. Is there some built-in way to check for the existence of a system process (besides plowing through the output of TASKLIST)? Could @PID and ISAPP be made to see system processes?
I was looking at the @SERVICE variable function, in the FedUtils plugin, which takes a name, and not a PID. Would this be a possible solution?
From the FedUtils help file;
%@service[diskeeper,query] - Running
%@service[diskeeper,stop]
- Stop service diskeeper request sent.
%@service[diskeeper,query] - Stopped
%@service[diskeeper,start] - Start service diskeeper request sent.
%@service[diskeeper,query] - Running
%@service[mdm,query] - Running
%@service[clipbook,query] - Not found
%@service[tcpip,query] - Running
%@service[msdtc,query] - Stopped
%@service[fax,query] - Stopped
Joe