I don't want to launch an exe.
When I detect that "otherprog.exe" process is running I want toli find out the command line used to launch it ("otherprog.exe" arg1,arg2,arg3,...)
Yes it is. I could be wrong, but I do not believe that you can find out what command line parameters were used once the process has been launched. Hopefully someone can prove me wrong.
As I understand it Serban wants to have a system watch looking for a particular process to start. Once they detect that process they then want to extract, somehow, the command line parameters that started that process. Remember that this process is not what they started nor is it a program etc. that they created, but some other program started, which reminds me of watchdog(?) a software package that could tell you what called what but I do not know if it intercepts any of the calls. Do a search for in on the web, it still may exists.
This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
By continuing to use this site, you are consenting to our use of cookies.