-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathWindowsManagementInstrumentation.cs
46 lines (44 loc) · 1.42 KB
/
WindowsManagementInstrumentation.cs
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
using System;
using System.Collections.Generic;
using System.Diagnostics;
using System.Globalization;
using System.Management;
using System.Text;
namespace uk.JohnCook.dotnet.NAudioWrapperLibrary
{
public static class WindowsManagementInstrumentation
{
public static ManagementEventWatcher NewProcessCreatedEventWatcher()
{
ManagementEventWatcher processCreationWatcher = new ManagementEventWatcher()
{
Query = new WqlEventQuery(
"__InstanceCreationEvent",
new TimeSpan(0, 0, 1),
"TargetInstance isa \"Win32_Process\""
),
Options =
{
Timeout = new TimeSpan(0, 0, 5)
}
};
return processCreationWatcher;
}
public static ManagementEventWatcher ProcessDestroyedEventWatcher()
{
ManagementEventWatcher processDestroyedWatcher = new ManagementEventWatcher()
{
Query = new WqlEventQuery(
"__InstanceDeletionEvent",
new TimeSpan(0, 0, 1),
"TargetInstance isa \"Win32_Process\""
),
Options =
{
Timeout = new TimeSpan(0, 0, 5)
}
};
return processDestroyedWatcher;
}
}
}