| Win32_ProcessStopTrace |
| The ProcessStopTrace event class indicates a process has terminated. |
| NameSpace Path |
| \ROOT\CIMV2 |
| PROPERTY | SMS_REPORT | CIMTYPE | DESCRIPTION |
| ExitStatus | | UInt32 | The ExitStatus property contains the exit status of the stopped process |
| PageDirectoryBase | | UInt64 | The PageDirectoryBase property identifies the process' page directory base. |
| ParentProcessID | | UInt32 | The ParentProcessID property identifies of the process that actuallycaused the event to happen. |
| ProcessID | | UInt32 | The ProcessID property identifies the process involved in the event. |
| ProcessName | | String | The ProcessName property contains the name of the process. |
| SECURITY_DESCRIPTOR | | UInt8 | NA |
| SessionID | | UInt32 | The SessionID property identifies the session under which the process exists. |
| Sid | | UInt8 | The Sid property is the security identifier representing the user context under which the event happened. |
| TIME_CREATED | | UInt64 | NA |
| SAMPLE DATA INSTANCE |
Class does not currently contain data instances
|
