2

Is there a way to know when a process (an executable) starts another process (another executable?) And what that new process is?

user577240
  • 460
  • 1
  • 7
  • 14
  • 1
    This might be helpful - http://stackoverflow.com/questions/848618/net-events-for-process-executable-start – Linkgoron Apr 08 '11 at 01:47

1 Answers1

2

If you are wanting to do this programmatically it is a tricky task but still doable, you would need to get every process that is running and find it's parent process ID. Then compare to the previous check if it is new.

If you simply want to find out about a specific program try this application by Microsoft: Process Monitor

Justin
  • 84,773
  • 49
  • 224
  • 367
Craig White
  • 13,492
  • 4
  • 23
  • 36