Get-Process Mitigation

Module:
processmitigations
Gets the current process mitigation settings, either from the registry, from a running process, or saves all to a XML.

Syntax 

Get-ProcessMitigation
   [-FullPolicy]
   [<CommonParameters>]
Get-ProcessMitigation
   [-Id] <Int32[]>
   [<CommonParameters>]
Get-ProcessMitigation
   [-Name] <String>
   [-RunningProcesses]
   [<CommonParameters>]
Get-ProcessMitigation
   [-RegistryConfigFilePath <String>]
   [<CommonParameters>]
Get-ProcessMitigation
   [-System]
   [<CommonParameters>]

Description

Gets all process mitigation settings either by process name (either running or from -Registry), or by process ID. Can also save all settings to an XML file.

Examples

Example 1 

PS C:\> Get-ProcessMitigation -Name notepad.exe -RunningProcess

Gets the current settings on all running instances of notepad.exe

Example 2 

PS C:\> Get-ProcessMitigation -Name notepad.exe

Gets the current settings in the registry for notepad.exe

Example 3 

PS C:\> Get-ProcessMitigation -Id 1304

Gets the current settings for the running process with pid 1304

Example 4 

PS C:\> Get-ProcessMitigation -RegistryConfigFilePath settings.xml

Gets the all process mitigation settings from the registry and saves them to the xml file settings.xml

Example 5 

PS C:\> Get-ProcessMitigation -FullPolicy

Gets all policies for all processes set in the registry.

Example 6 

PS C:\> Get-ProcessMitigation -System

Gets the current system process mitigation defaults stored in the registry.

Example 7 

PS C:\> Get-Process notepad | Get-ProcessMitigation

Gets the current process mitigation settings for all running instances of notepad.exe

Required Parameters

-Id

Process Id to retrieve current running process mitigation settings from

Type: Int32[]
Position: 0
Default value: None
Accept pipeline input: True (ByPropertyName, ByValue)
Accept wildcard characters: False
-Name

{Current process name to get current running (Or from registry) process mitigation settings from one (Can be more than one instance)

Type: String
Position: 0
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Optional Parameters

-FullPolicy

Returns every processes' current mitigation settings in the registry

Type: SwitchParameter
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-RegistryConfigFilePath

File to save the current registry process mitigation configuration to

Type: String
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False
-RunningProcess

Pull the current process mitigation settings from a running instance instead of the registry.

Type: SwitchParameter
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False
-System

Pulls the current system defaults for process mitigations.

Type: SwitchParameter
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

Inputs

System.String

System.Int32[]

Outputs

System.Object