| Win32_ProcessStartTrace |
| The ProcessStartTrace event class indicates a new process has started. |
| NameSpace Path |
| \ROOT\CIMV2 |
| PROPERTY | SMS_REPORT | CIMTYPE | DESCRIPTION |
| PageDirectoryBase | | UInt64 | The PageDirectoryBase property identifies the process' page directory base. |
| ParentProcessID | | UInt32 | The ParentProcessID property identifies of the process that actuallycaused the event to happen. |
| ProcessID | | UInt32 | The ProcessID property identifies the process involved in the event. |
| ProcessName | | String | The ProcessName property contains the name of the process. |
| SECURITY_DESCRIPTOR | | UInt8 | NA |
| SessionID | | UInt32 | The SessionID property identifies the session under which the process exists. |
| Sid | | UInt8 | The Sid property is the security identifier representing the user context under which the event happened. |
| TIME_CREATED | | UInt64 | NA |
| SAMPLE DATA INSTANCE |
Class does not currently contain data instances
|
