Author: fpefpe
Subject: Best way to track program
Posted: 20 November 2013 at 3:06pm
Hello -- I want to track the activity of a program, say foo.exe -- what is the best way to do this?
Set up a filter looking for the command line? is the verb in the filter is "is" does that mean it has to be an exact match? including arguments?
Or can I have foo.exe start then set up a filter tracking its PID?
Thanks
Subject: Best way to track program
Posted: 20 November 2013 at 3:06pm
Hello -- I want to track the activity of a program, say foo.exe -- what is the best way to do this?
Set up a filter looking for the command line? is the verb in the filter is "is" does that mean it has to be an exact match? including arguments?
Or can I have foo.exe start then set up a filter tracking its PID?
Thanks