Monday, February 24, 2014

Netstat Trick - Display Executable Generating Network Traffic

Windows Defender used to have a tools option which showed which applications were running and connecting to the network. For some reason they removed that in Windows 7.

Netstat provides another way to obtain that information.

Run a cmd window as administrator and type:

netstat -anob

This will give you the process id (PID) and the executable name in most cases.