Get Parent Process #Through WMI's Win32_Process' ParentProcessID property:
Get-process with user info. http://myitforum.com/cs2/blogs/scassells/archive/2008/05/20/powershell-get-a-process-owner.aspx (Get-WmiObject -Class win32_process | where{$_.ProcessName -eq 'AutoHotkey.exe'}).getowner() | select domain, user |
Powershell >