---
sourceDocument: Australia Security Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/security-management

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Security Management

ft:clusterId :

    - security

bundleId :

    - security

workflow :

    - Technology


---

# Execute procdump action

# Execute procdump action {#ariaid-title1}

* Release version: Australia
* 
* Updated March 12, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read

Execute procdump is a powershell action that runs the procdump on the selected processes, dumps the data into a file, and posts it to a shared site on an internal network. An analyst can then view a deny
listed process, highlighted in red in a security incident, and perform additional analysis on the file.

## Results

Possible results for this action are:
{#execute_procdump__table_lg3_dm5_vv__entry__2}

| Result | Description |
|-|-|
| Success | The procdump executed successfully on the process_name, and the details are available in actionOutput.response. |
| Failure | The procdump failed to execute on the process_name, and the details are available in actionOutput.response. |
[Table 1. Results]

{#execute_procdump__table_lg3_dm5_vv}

## Input variables

Input variables are used to create the requested outputs.
{#execute_procdump__table_pgm_tfy_jr__entry__2}

| Variable | Description |
|-|-|
| targetId | \[Mandatory\] The target ID to run the procdump on. |
| process_name | \[Mandatory\] The process name for the procdump. |
| dump_path | \[Mandatory\] The local file path to which the generated dump file will be saved. |
| dump_filename | \[Mandatory\] The filename of the file generated by the procdump. All special characters will be replaced with hyphens (-) from the dump file name when the file is generated. |
| file_share_path | \[Mandatory\] The file share path to which the dump file will be copied. |
[Table 2. Input variables]

{#execute_procdump__table_pgm_tfy_jr}

## Output variables

The output variables contain data that can be used in subsequent actions.
{#execute_procdump__table_bnj_jfy_jr__entry__2}

| Variable | Description |
|-|-|
| share_path | The file share path to which the dump file was copied. |
| response | A JSON representation of the result of the procdump. |
| result | The result of the procdump. |
[Table 3. Output variables]

{#execute_procdump__table_bnj_jfy_jr}

