diff --git a/Detect-ActiveESP.ps1 b/Detect-ActiveESP.ps1
new file mode 100644
index 0000000..3e3692c
--- /dev/null
+++ b/Detect-ActiveESP.ps1
@@ -0,0 +1,9 @@
+$proc = Get-Process -Name SecurityHealthSystray -ErrorAction SilentlyContinue
+
+if ($null -ne $proc) {
+    Write-Output "ESP-not-active"
+    exit 0
+} else {
+    Write-Output "ESP-active"
+    exit 0
+}
\ No newline at end of file