To do this without polling requires WMI. This is well supported in .net and you can use the ManagementEventWatcher
class to subscribe to WMI notifications.
This Code Project article illustrates how it is done. Here’s an extract showing how straightforward it is.
notePad = new ProcessInfo("notepad.exe");
notePad.Started +=
new Win32Process.ProcessInfo.StartedEventHandler(this.NotepadStarted);
notePad.Terminated +=
new Win32Process.ProcessInfo.TerminatedEventHandler(this.NotepadTerminated);
Note that ProcessInfo
is a class implemented in the code attached to that article.