query process query session query termserver query user
C:\>query session SESSIONNAME USERNAME ID STATE TYPE DEVICE services 0 Disc Rene 1 Disc >console Freddie 2 Active rdp-tcp 65537 Listen
C:\>query user USERNAME SESSIONNAME ID STATE IDLE TIME LOGON TIME rene 1 Disc 1:48 9/6/2019 10:26 PM >freddie console 2 Active 1:48 9/7/2019 7:24 AM
C:\>query process USERNAME SESSIONNAME ID PID IMAGE >freddie console 2 5868 sihost.exe >freddie console 2 7760 svchost.exe >freddie console 2 4980 taskhostw.exe >freddie console 2 7972 explorer.exe >freddie console 2 8392 smartscreen.exe