Someone recently complained about the number of tasks listed in Windows 8.1 Scheduled Tasks and searching them for example, Windows Defender. Quick trip into PowerShell land arrived at
Get-ScheduledTask
hmmm
PS C:\Support> Get-ScheduledTask *defender* TaskPath TaskName State --------------------- \Microsoft\Windows\Windows Defender\ Windows Defender Cache Mainten... Ready \Microsoft\Windows\Windows Defender\ Windows Defender Cleanup Ready \Microsoft\Windows\Windows Defender\ Windows Defender Scheduled Scan Ready \Microsoft\Windows\Windows Defender\ Windows Defender Signature Update Ready \Microsoft\Windows\Windows Defender\ Windows Defender Verification Ready
Yay!
Then I was asked.. How to find the exe that belonged to a Scheduled Task, MpCmdRun.exe (Windows Defender)... huh what? errr...