Is there a way to get an event from windows on every new process that is started?
c++, native, process, winapi, windows
Solution
The problem with using a driver is that you will require permission to install it, but otherwise I think is the safest method.
In user space you can try to create a window hook which will work if such application uses a windows, but is otherwise quite obnoxious.
On the other hand you can try to use WMI, which is the underlying technology used in C#. You can look for pointers in this anwers and this examples.
Problem
I want to get a notification each time a new process is started by the operating system. Note that I need to that in native code (I know it can be done in managed code using System.Management members). Extra points if there is a way to get it before the process starts running :) (i.e in during its initialization) Thanks.