python - Python程序将由特定发布者名称过滤的元组与进程名称，pid，路径和启动参数写入txt文件

Question

这是我到目前为止写的:) 我不知道如何过滤发布者的进程以仅显示这些进程并将它们以元组的形式写入 txt 文件。

import wmi
c = wmi.WMI ()

for proc in c.Win32_Process ():
    a = proc.name
    b = proc.processId
    c = proc.executablepath
    my_tuple = (a, b, c)
    print(my_tuple)

该程序的输出是：

('svchost.exe', 3584, None)
('svchost.exe', 3592, None)
('svchost.exe', 3608, None)
('svchost.exe', 3616, None)
('KiteService.exe', 3640, None)
('ProductAgentService.exe', 3700, None)
('svchost.exe', 3732, None)
('updatesrv.exe', 3768, None)
('vmtoolsd.exe', 3780, None)
('VGAuthService.exe', 3800, None)
('svchost.exe', 3792, None)
('svchost.exe', 3920, None)
('svchost.exe', 3492, None)
('svchost.exe', 4152, None)
('dllhost.exe', 4872, None)
('dllhost.exe', 5048, None)
('WmiPrvSE.exe', 3632, None)
('msdtc.exe', 5040, None)
('VSSVC.exe', 5404, None)
('svchost.exe', 5508, None)
('svchost.exe', 5688, None)
('svchost.exe', 5752, None)
('bdntwrk.exe', 5940, None)
('conhost.exe', 5960, None)
('sihost.exe', 6460, 'C:\\WINDOWS\\system32\\sihost.exe')
('svchost.exe', 6516, 'C:\\WINDOWS\\system32\\svchost.exe')
('svchost.exe', 6552, 'C:\\WINDOWS\\system32\\svchost.exe')
('taskhostw.exe', 6820, 'C:\\WINDOWS\\system32\\taskhostw.exe')
('svchost.exe', 6844, None)
('DiscoverySrv.exe', 6992, None)
('svchost.exe', 7040, None)
('ctfmon.exe', 7152, None)
('explorer.exe', 5416, 'C:\\WINDOWS\\Explorer.EXE')
('svchost.exe', 6620, None)
('svchost.exe', 6444, None)
('svchost.exe', 7120, None)
('svchost.exe', 7196, None)
('svchost.exe', 7324, None)
('svchost.exe', 7480, 'C:\\WINDOWS\\system32\\svchost.exe')
('svchost.exe', 7924, None)
('StartMenuExperienceHost.exe', 8016, 'C:\\Windows\\SystemApps\\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\\StartMenuExperienceHost.exe')
('svchost.exe', 8036, None)
('svchost.exe', 8152, None)
('RuntimeBroker.exe', 4336, 'C:\\Windows\\System32\\RuntimeBroker.exe')
('SearchApp.exe', 5196, 
('py.exe', 4932, 'C:\\WINDOWS\\py.exe')
('python.exe', 3820, 'C:\\Users\\Marius\\anaconda3\\python.exe')

并且输出文件应该是（但不是）类似于（作为 txt 文件中的元组）：

('process.exe', 2368, 'c:\\path', ['settings/services/configs/config.json'])
...

标签： pythontuplespid