ProcessWatcher Class

Public Class ProcessWatcher
	Implements IDisposable

Dim instance As ProcessWatcher

public ref class ProcessWatcher : IDisposable

type ProcessWatcher = 
    class
        interface IDisposable
    end

No code example is currently available or this language may not be supported.

Imports System.Management

Public Class Form1 : Inherits Form

    Private WithEvents processWatcher As New ProcessWatcher

    Private Sub Form1_Load(ByVal sender As Object, ByVal e As EventArgs) _
    Handles Me.Load

        Me.processWatcher.Start()

    End Sub

    Private Sub Form1_FormClosing(ByVal sender As Object, ByVal e As FormClosingEventArgs) _
    Handles Me.FormClosing

        Me.processWatcher.Dispose()

    End Sub

    Private Sub ProcessWatcher_ProcessStarted(ByVal sender As Object, ByVal e As EventArrivedEventArgs) _
    Handles processWatcher.ProcessStarted

        Dim name As String = CStr(e.NewEvent.Properties("ProcessName").Value)
        Dim pid As Integer = CInt(e.NewEvent.Properties("ProcessId").Value)
        Dim path As String = String.Empty

        Dim connOptions As New ConnectionOptions With {
            .Impersonation = ImpersonationLevel.Impersonate,
            .EnablePrivileges = True
        }

        Dim scope As New ManagementScope(String.Format("\\{0}\ROOT\CIMV2", Environment.MachineName), connOptions)
        scope.Connect()

        Dim query As New SelectQuery(String.Format("SELECT * FROM Win32_Process WHERE ProcessId={0}", pid))
        Dim enumOptions As New EnumerationOptions With {.ReturnImmediately = True}

        Using mos As New ManagementObjectSearcher(scope, query, enumOptions),
              moc As ManagementObjectCollection = mos.Get(),
              mo As ManagementObject = DirectCast(moc(0), ManagementObject)

           path = CStr(mo.Properties("ExecutablePath").Value)
        End Using

        Console.WriteLine(String.Format("Process started | Name: {0}", name))
        Console.WriteLine(String.Format("Process started | PID : {0}", pid))
        Console.WriteLine(String.Format("Process started | Path: {0}", path))

    End Sub

    Private Sub ProcessWatcher_ProcessStopped(ByVal sender As Object, ByVal e As EventArrivedEventArgs) _
    Handles processWatcher.ProcessStopped

        Dim name As String = e.NewEvent.Properties("ProcessName").Value.ToString()

        Console.WriteLine(String.Format("Process stopped | Name: {0}", name))

    End Sub

End Class

No code example is currently available or this language may not be supported.

No code example is currently available or this language may not be supported.

No code example is currently available or this language may not be supported.

No code example is currently available or this language may not be supported.