Is there an event in .NET to get a list of windows processes ?

Question

0.00/5 (No votes)

See more:

I want to programatically monitor and log the activity of processes running in a computer. How can we get a list of processes running in windows each time a process starts and ends? Is there an event in .NET that is triggered when a process starts or ends?
Any help will be very appreciated.

What I have tried:

I didn't find a proper class to complete managing of processes.

Posted 18-Oct-16 7:29am

grivix

Updated 19-Oct-16 6:06am

Add a Solution

Comments

[no name] 18-Oct-16 13:37pm

No "event" that I know of. Most of the solutions I have seen doing what you want to do poll the running processes.

Michael_Davies 18-Oct-16 14:24pm

WMI allows you to capture events and includes process creation.

For a start see http://stackoverflow.com/questions/10139270/process-start-event-using-wmi-not-all-process-starts-being-detected

1 solution

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Richard Deeming · Answer 1 · 2016-10-18T08:31:00

Solution 1

You'll need to use WMI, and subscribe to the Win32_ProcessStartTrace[^] and Win32_ProcessStopTrace[^] events, or the lower-level __InstanceCreationEvent[^] and __InstanceDeletionEvent[^] events.

There's an example in this StackOverflow answer[^] which monitors processes with a specific name.

Posted 18-Oct-16 8:31am

Richard Deeming

Comments

grivix 22-Oct-16 11:46am

Thank you Michael Davies, thank you Richard Deeming. I'll try it using WMI as you suggest.