.NET Process Monitor

by

WMI provides a way to track processes starting and terminating with the Win32_ProcessTrace classes. Best shown with an example. Start a new Console application, Project + Add Reference, select System.Management. Paste this code:

using System;
using System.Management;

class Process {
  public static void Main() {
    ManagementEventWatcher startWatch = new ManagementEventWatcher(
      new WqlEventQuery("SELECT * FROM Win32_ProcessStartTrace"));
    startWatch.EventArrived += new EventArrivedEventHandler(startWatch_EventArrived);
    startWatch.Start();
    ManagementEventWatcher stopWatch = new ManagementEventWatcher(
      new WqlEventQuery("SELECT * FROM Win32_ProcessStopTrace"));
    stopWatch.EventArrived += new EventArrivedEventHandler(stopWatch_EventArrived);
    stopWatch.Start();
    Console.WriteLine("Press any key to exit");
    while (!Console.KeyAvailable) System.Threading.Thread.Sleep(50);
    startWatch.Stop();
    stopWatch.Stop();
  }

  static void stopWatch_EventArrived(object sender, EventArrivedEventArgs e) {
    Console.WriteLine("Process stopped: {0}", e.NewEvent.Properties["ProcessName"].Value);
  }

  static void startWatch_EventArrived(object sender, EventArrivedEventArgs e) {
    Console.WriteLine("Process started: {0}", e.NewEvent.Properties["ProcessName"].Value);
  }
}

Edit the manifest so this program runs elevated. Then simply start some programs to see it at work. Beware that it is not especially quick.

More Related Contents:

  1. How to get parent process in .NET in managed way
  2. Executing Batch File in C#
  3. How to spawn a process and capture its STDOUT in .NET? [duplicate]
  4. How do I get output from a command to appear in a control on a Form in real-time?
  5. Delete a file being used by another process
  6. How can I know if a process is running?
  7. Kill child process when parent process is killed
  8. Wait until a process ends
  9. Hide console window from Process.Start C#
  10. .NET Events for Process executable start
  11. How do I send ctrl+c to a process in c#?
  12. Open file with associated application
  13. sharing memory between two applications
  14. Run elevated process
  15. How can a Windows Service start a process when a Timer event is raised?
  16. Using Process.Start() to start a process as a different user from within a Windows Service
  17. How to detect a process start & end using c# in windows?
  18. .NET – WindowStyle = hidden vs. CreateNoWindow = true?
  19. C# – Making a Process.Start wait until the process has start-up
  20. Start new process, without being a child of the spawning process
  21. Launching process in C# Without Distracting Console Window
  22. File System TreeView
  23. C# get process output while running
  24. Service starting a process wont show GUI C#
  25. How to hide cmd window while running a batch file?
  26. C# process.start, how do I know if the process ended?
  27. To run cmd as administrator along with command?
  28. PostMessage WM_KEYDOWN send multiply keys?
  29. Redirect process output C#
  30. How to kill a process without getting a “process has exited” exception?

Leave a Comment