Built off the open source project Osquery
Description: This query gives you the started processed also with username
Tested on Windows 7 Windows 10, Mac OS X 10.14.6, CentOS 7.8, Ubuntu 19.04.
SQL:
SELECT p.name, u.username, p.path, p.cmdline, p.pid FROM processes p JOIN users u on u.uid=p.uid;
Copyright © 2005-2023 Broadcom. All Rights Reserved. The term “Broadcom” refers to Broadcom Inc. and/or its subsidiaries.