How to get process id by its service name with a script to variable

Question

I have service named WinDefend and it runs on process svchost.exe
There other many svchost.exe processes and I need to find a way to get its ID.
when I run tasklist /svc I can see:

I am not sure how can I get it.
I found this command but when I tried the select "PID" it gave me empty column.

I need to get the PID of the process to variable.

Answer 1

tasklist is just returning text, not actual objects that have properties you can access. You can use WMI to get this information instead:

$id = Get-WmiObject -Class Win32_Service -Filter "Name LIKE 'WinDefend'" |        Select-Object -ExpandProperty ProcessId  $process = Get-Process -Id $id 

Update for PowerShell Core

In version 6, Windows PowerShell started towards cross platform support with PowerShell Core based on .NET Core. This led to many changes in cmdlets that were Windows-centric and some being left out completely. WMI is a Windows only technology, so its cmdlets (e.g. Get-WmiObject) were not ported over. However, its features are available via CIM cmdlets (e.g. Get-CimInstance) here is a version that will work on PowerShell 6+:

$id = Get-CimInstance -Class Win32_Service -Filter "Name LIKE 'WinDefend'" |        Select-Object -ExpandProperty ProcessId  $process = Get-Process -Id $id 

Answer 2

$p=Tasklist /svc /fi "SERVICES eq windefend" /fo csv | convertfrom-csv $p.PID