---
title: Execute procdump action
description: Execute procdump is a powershell action that runs the procdump on the selected processes, dumps the data into a file, and posts it to a shared site on an internal network. An analyst can then view a deny listed process, highlighted in red in a security incident, and perform additional analysis on the file.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/security-management/security-incident-response/execute\_procdump.html
release: australia
product: Security Incident Response
classification: security-incident-response
topic_type: reference
last_updated: "2026-03-12"
reading_time_minutes: 1
breadcrumb: [Run procdump flow, Security Incident Response Orchestration workflows and activities, Understand Security Incident Response Orchestration workflows and workflow templates, Security Incident Response Orchestration, Security Incident Response, Enterprise security case management applications, Security Operations]
---

# Execute procdump action

**Execute procdump** is a powershell action that runs the procdump on the selected processes, dumps the data into a file, and posts it to a shared site on an internal network. An analyst can then view a deny listed process, highlighted in red in a security incident, and perform additional analysis on the file.

## Results

Possible results for this action are:

|Result|Description|
|------|-----------|
|Success|The procdump executed successfully on the process\_name, and the details are available in actionOutput.response.|
|Failure|The procdump failed to execute on the process\_name, and the details are available in actionOutput.response.|

## Input variables

Input variables are used to create the requested outputs.

|Variable|Description|
|--------|-----------|
|targetId|\[Mandatory\] The target ID to run the procdump on.|
|process\_name|\[Mandatory\] The process name for the procdump.|
|dump\_path|\[Mandatory\] The local file path to which the generated dump file will be saved.|
|dump\_filename|\[Mandatory\] The filename of the file generated by the procdump. All special characters will be replaced with hyphens \(-\) from the dump file name when the file is generated.|
|file\_share\_path|\[Mandatory\] The file share path to which the dump file will be copied.|

## Output variables

The output variables contain data that can be used in subsequent actions.

|Variable|Description|
|--------|-----------|
|share\_path|The file share path to which the dump file was copied.|
|response|A JSON representation of the result of the procdump.|
|result|The result of the procdump.|

**Parent Topic:**[Run procdump flow](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/security-management/security-incident-response/invoke_procdump.md)