neilkonitzer,
As I understand it Serban wants to have a system watch looking for a particular process to start. Once they detect that process they then want to extract, somehow, the command line parameters that started that process. Remember that this process is not what they started nor is it a program etc. that they created, but some other program started, which reminds me of watchdog(?) a software package that could tell you what called what but I do not know if it intercepts any of the calls. Do a search for in on the web, it still may exists.
Good Luck