> ## Documentation Index
> Fetch the complete documentation index at: https://docs.blinkops.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Retrieve Process Details By ID

Retrieve process details by ID.

The following permission is required to run this action:

* `IOC Management`: **Read** and **Write**.

* `IOCs (Indicators of Compromise)`: **Read**.

**Note:**

* An error with 404 response code may occur if no devices are found for the indicator, or if the host has aged out.
* The completion of the action doesn't indicate that the action has succeeded - check for errors in the response body.

<Note>
  External Documentation

  To learn more, visit the [CrowdStrike documentation](https://falcon.us-2.crowdstrike.com/documentation/page/ed1b4a95/detection-and-prevention-policy-apis#y38b3568).
</Note>

## Parameters

<div className="integrations-table">
  | Parameter  | Description                                     |
  | ---------- | ----------------------------------------------- |
  | Process ID | The running process you want to get details on. |
</div>

## Example Output

```json theme={"dark"}
{
	"meta": {
		"query_time": 0.036953655,
		"trace_id": ""
	},
	"resources": [
		{
			"device_id": "2dd7xxxxxxxxfb3c2",
			"command_line": "\\AppData\\Local\\Temp\\svchost.exe.4406xxxxxxxx5051.fuzz\"",
			"process_id": "2dd7xxxxxxxxb3c2:922xxx411",
			"process_id_local": "298xxx772",
			"file_name": "\\Users\\example\\AppData\\Local\\Temp\\svchost.exe.4406xxxxxxxx5051.fuzz",
			"start_timestamp": "2016-01-07T08:51:13Z",
			"start_timestamp_raw": "130966302736257500",
			"stop_timestamp": "2016-01-07T08:51:14Z",
			"stop_timestamp_raw": "130966302744226250"
		}
	],
	"errors": []
}
```

## Workflow Library Example

[Retrieve Process Details by Id with Crowdstrike and Send Results Via Email](https://library.blinkops.com/workflows/retrieve-process-details-by-id-with-crowdstrike-and-send-results-via-email)

<div className="iframe-wrapper">
  <div className="iframe-media">
    <img src="https://mintcdn.com/blinkops-2/ojHYuDeYX5FWuN8a/img/Icons/play-box.svg?fit=max&auto=format&n=ojHYuDeYX5FWuN8a&q=85&s=b8af968e71438a9499c3223c9bd29fb2" alt="Workflow Library" width="16" height="16" data-path="img/Icons/play-box.svg" />

    Preview this Workflow on desktop
  </div>

  <iframe className="iframe" src="https://library.blinkops.com/workflows/retrieve-process-details-by-id-with-crowdstrike-and-send-results-via-email/canvas" />
</div>