Back to Blog
Arnošt Havelka

Practical: Tasklist

Scenario: identifying memory hogs.

Start Interactive Lesson
Practical: Tasklist

Practical: Tasklist Analysis

Your server is running slow. You suspect a process is eating up all the RAM. Let's use tasklist with filters to find the culprit.

The Mission

Identify any process using more than 100 MB of memory.

Step 1: Filter by Memory Usage

We use /fi (Filter) to look for memory usage greater than (gt) 100,000 KB.

Command Prompt
C:\Users\User>tasklist /fi "MEMUSAGE gt 100000"

Step 2: Check for Specific DLLs

Sometimes you need to know which process is using a specific system library. Use /m.

Command Prompt
C:\Users\User>tasklist /m ntdll.dll

Knowledge Check

1 / 2

Which operator checks for 'Greater Than' in filters?

References

These Microsoft Learn and Windows documentation links provide authoritative details for the commands used in this article.

Up Next

The Xcopy Command

Copy entire directory trees.