What processes are responsible for the low memory warning?

I’ve a VM where I had the following warning:

To find the culprit using the event logs I did:

# Get the latest event            
[xml]$xml  = (Get-WinEvent -FilterHashtable @{            
    LogName='System';            
    ProviderName='Microsoft-Windows-Resource-Exhaustion-Detector';            
} -MaxEvents 1).ToXML()            
            
# Same console ouput as | fl *            
$xml.Event.UserData.MemoryExhaustionInfo.ProcessInfo.GetEnumerator()            
            
# Get a nice display            
$xml.Event.UserData.MemoryExhaustionInfo.ProcessInfo.GetEnumerator()|            
ft -Property Name,ID,HandleCount,@{            
    l='CommitCharge (MB)';            
    e={'{0:N2}'-f($_.CommitCharge/1MB)}            
}            

Here’s the nice output 😎

So, nothing unusual or malicious…

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s