How to trap the event of a new process starting with wmi
placid
Bulkan at gmail.com
Thu Jul 6 03:12:05 EDT 2006
gel wrote:
> gel wrote:
>
> > Below is how it is down with vbscript. What is the best way to convert
> > this to python?
> >
> > strComputer = "."
> > Set objWMIService = GetObject("winmgmts:" _
> > & "{impersonationLevel=impersonate}!\\" & strComputer &
> > "\root\cimv2")
> > Set colMonitoredProcesses = objWMIService. _
> > ExecNotificationQuery("select * from __instancecreationevent " _
> > & " within 1 where TargetInstance isa 'Win32_Process'")
> > i = 0
> >
> > Do While i = 0
> > Set objLatestProcess = colMonitoredProcesses.NextEvent
> > Wscript.Echo objLatestProcess.TargetInstance.Name
> > Loop
>
> A better question might be is there a method or guide for converting
> from vbs wmi to python wmi?
Dont know about converting vbs to python but using Tim Golden's wmi
module to trap the event of a new process starting is easy.
wmi module can be found at http://timgolden.me.uk/python/wmi.html
>>> import wmi
>>> c = wmi.WMI()
>>> watcher = c.watch_for (
>>> notification_type="Creation"
>>> wmi_class="Win32_Process"
>>> delay_secs=2,
>>> Name='calc.exe'
>>> )
>>> calc_created = watcher ()
>>> print calc_created
and if you want to trap closing down of processes then change
notification_type to "Deletion"
-Cheers
More information about the Python-list
mailing list