Vestigium.Helpers.Processes 1.0.0

.NET 10.0 This package targets .NET 10.0. The package is compatible with this framework or higher. 
dotnet add package Vestigium.Helpers.Processes --version 1.0.0
                    


                    

                
NuGet\Install-Package Vestigium.Helpers.Processes -Version 1.0.0
This command is intended to be used within the Package Manager Console in Visual Studio, as it uses the NuGet module's version of Install-Package. 
<PackageReference Include="Vestigium.Helpers.Processes" Version="1.0.0" />
For projects that support PackageReference, copy this XML node into the project file to reference the package. 
<PackageVersion Include="Vestigium.Helpers.Processes" Version="1.0.0" />
                    


                            Directory.Packages.props
                        

                    

                
<PackageReference Include="Vestigium.Helpers.Processes" />
                    


                            Project file
For projects that support Central Package Management (CPM), copy this XML node into the solution Directory.Packages.props file to version the package. 
paket add Vestigium.Helpers.Processes --version 1.0.0
                    


                    

                
#r "nuget: Vestigium.Helpers.Processes, 1.0.0"
#r directive can be used in F# Interactive and Polyglot Notebooks. Copy this into the interactive tool or source code of the script to reference the package. 
#:package Vestigium.Helpers.Processes@1.0.0
#:package directive can be used in C# file-based apps starting in .NET 10 preview 4. Copy this into a .cs file before any lines of code to reference the package. 
#addin nuget:?package=Vestigium.Helpers.Processes&version=1.0.0
                    


                            Install as a Cake Addin
                        

                    

                
#tool nuget:?package=Vestigium.Helpers.Processes&version=1.0.0
                    


                            Install as a Cake Tool

Vestigium.Helpers.Processes

Windows process table: list, get, search, watch, lifetime, campaigns. Kql queries bind through Vestigium.Helpers.Kql — this package owns the rows.

TFM is net10.0-windows.

Identity

Field Value
Package Vestigium.Helpers.Processes 1.0.0
TFM net10.0-windows
APPID Processes (ProcessesCatalog.AppId)
EVENTID Reserved 15000–15499
Depends on Json, Kql, System.Diagnostics.PerformanceCounter 9.0.8, Vestigium.Logging
License MIT
Contract 002 -- Requirements Document

Consume

<PackageReference Include="Vestigium.Helpers.Processes" Version="1.0.0" />

using Vestigium.Helpers.Processes;

var rows = ProcessHelper.List();
var one  = ProcessHelper.Get(pid);
var hits = ProcessHelper.Search("vestigium", ProcessSearchMode.Contains);
var kql  = ProcessHelper.Search("(PID == 10 || Name LIKE '%edge%') && GPU.Usage GT 20");

Surface

Call Returns Notes
List / Get / TryGet rows Missing PID is null / false.
Search(term, mode) rows StartsWith / EndsWith / Contains. Cap 1..4096.
Search(query) rows Kql pack Process.
GetTree / GetChildren / GetThreads tree / rows
Watch(pid, …) / Watch(query, …) watcher Interval 250 ms–60 s.
Start / StartAs start result Never log the password.
Kill / KillTree / KillSearch kill result Skips denylist, PPL, Protected.
CreateCampaign campaign In-process only. No schtasks.
ProcessesCatalog.Register(cfg) void Host-only, during VestigiumLogger.Initialize.

Rules that do not move

  • Windows only. This is not a Linux process table.
  • Missing PID is not a fake row.
  • Confirm does not override denylist / PPL / Protected.
  • Never log command lines as secrets, passwords, or per-tick watcher samples.
  • Campaigns need the host process to stay running.
  • The library never calls VestigiumLogger.Initialize.

Logging

VestigiumLogger.Initialize(cfg =>
{
    cfg.AppId = "PingIQ";                       // host APPID, not Processes
    cfg.LogDirectory = logDir;
    ProcessesCatalog.Register(cfg);
});

Writes are no-ops until the host initializes. JSONL lands at %ProgramData%\Vestigium\Logs\{host-APPID}\.

Named events live in EventCatalog/processes.json.

Filter dialect: Vestigium.Helpers.Kql. Campaign recipes: Vestigium.Helpers.Json.

Long-form documents live in Vestigium.Documentation / Helpers / Processes. Folders, not files — current revision sits inside the folder.

Area GitHub
000 -- Archived folder
001 -- Implementation Plan folder
002 -- Requirements Document folder
003 -- Design Document folder
004 -- Developers Guide folder
Product Compatible and additional computed target framework versions.
.NET net10.0-windows7.0 is compatible. 
Compatible target framework(s)
Included target framework(s) (in package)
Learn more about Target Frameworks and .NET Standard.

NuGet packages (1)

Showing the top 1 NuGet packages that depend on Vestigium.Helpers.Processes:

Package Downloads
Vestigium.Helpers.Services

Windows Service Control Manager: list, search, control, logon, recovery.

GitHub repositories

This package is not used by any popular GitHub repositories.

Version Downloads Last Updated
1.0.0 81 10/16/2026