Exemple #1
0
        public void Win32ProcCreated(object sender, EventArrivedEventArgs e) {
            List<string> eventList = Timetube.getInstance().eventList;
            if (Timetube.getInstance().eventList != null) {
                foreach (PropertyData pd in e.NewEvent.Properties) {
                    ManagementBaseObject mbo = null;
                    if ((mbo = pd.Value as ManagementBaseObject) != null) {
                        lock (eventList) {
                            eventList.Add(String.Format("{0} Start process {1} exe='{2}' cl='{3}'", TimeFormat.GetTime(),
                                mbo.Properties["ProcessId"].Value,
                                mbo.Properties["ExecutablePath"].Value, mbo.Properties["CommandLine"].Value));
                        }
                    }
                }
            }

            /*
            foreach (PropertyData pd in e.NewEvent.Properties) {
                ManagementBaseObject mbo = null;
                if ((mbo = pd.Value as ManagementBaseObject) != null) {
                    Console.WriteLine("--------------Properties------------------");
                    foreach (PropertyData prop in mbo.Properties)
                        Console.WriteLine("{0} - {1}", prop.Name, prop.Value);
                }
            }
            */
        }
Exemple #2
0
        public static int Main2(string[] args)
        {
            Timetube tt = Timetube.getInstance();

            tt.SaveDirectory = "c:\\temp\\newDir";
            tt.Interval      = 10;
            Console.WriteLine("*** Started " + TimeFormat.GetDate() + " " + TimeFormat.GetTime());

            // initialise icon cache
            tt.loadIconMap();
            tt.BeginCapture();

            // spin wheels
            Console.WriteLine("press <enter> to stop...");
            Console.ReadLine();

            // shut down timer & event watchers
            tt.EndCapture();
            return(0);
        }
Exemple #3
0
 public void Win32ProcDeleted(object sender, EventArrivedEventArgs e) {
     List<string> eventList = Timetube.getInstance().eventList;
     if (eventList != null) {
         foreach (PropertyData pd in e.NewEvent.Properties) {
             ManagementBaseObject mbo = null;
             if ((mbo = pd.Value as ManagementBaseObject) != null) {
                 lock (eventList) {
                     eventList.Add(String.Format("{0} Start process {1} exe='{2}' cl='{3}'", TimeFormat.GetTime(),
                         mbo.Properties["ProcessId"].Value,
                         mbo.Properties["ExecutablePath"].Value, mbo.Properties["CommandLine"].Value));
                 }
             }
         }
     }
     /*
     //lock (Timetube.eventList) {
     if (Timetube.eventList != null) {
         Timetube.eventList.Add(String.Format("{0} End process {1} exe='{2}' cl='{3}'",
             TimeFormat.GetTime(), e.NewEvent.Properties["ProcessId"]));
     }
     //}
     Console.WriteLine("evc={0}",Timetube.eventList.Count);
      */
 }