监听启动的进程

最新推荐文章于 2024-07-19 13:43:16 发布

joyhen

最新推荐文章于 2024-07-19 13:43:16 发布

阅读量1.4k

点赞数

分类专栏： C# 文章标签： ManagementScope ManagementEventWatch EventArrived

C# 专栏收录该内容

270 篇文章 3 订阅

订阅专栏

原文：http://bbs.csdn.net/topics/390721596?page=1#post-396908543

static void Main(string[] args)
        {
            ManagementScope scope = new System.Management.ManagementScope(@"\\.\root\CIMV2");
            WqlEventQuery query = new WqlEventQuery(
                "__InstanceCreationEvent",
            new TimeSpan(0, 0, 1),
            "TargetInstance isa \"Win32_Process\"");
            ManagementEventWatcher watcher = new ManagementEventWatcher(scope, query);
            watcher.EventArrived += (s, e) => {
                Console.WriteLine("Process {0} has been created.",
                    ((ManagementBaseObject)e.NewEvent.Properties["TargetInstance"].Value).Properties["Name"].Value.ToString());
            };
            watcher.Start();

            Console.ReadKey();
        }