How to monitor a process call in windows using C++

Question

My situation :

Process A will call process B, that means process B is the child process of process A.

How we can capture what process will be called by process A?

Example Process A : bcc55.exe hello.c

Will automatically call process B : ilink32.exe Now give you the process A, how to find the process B.

score 0 · Answer 1 · edited May 23 '17 at 11:43

0

See my answer here to see how to enumerate child processes for a given windows process ID. You can first get the process ID by EXE name using the code here

edited May 23 '17 at 11:43

Community

1
1

answered Jan 03 '13 at 16:22

Mike Marshall

7,788
4
39
63

score 0 · Answer 2 · answered Jan 03 '13 at 16:25

0

You can hook the various CreateProcess* functions, run your own code (perhaps to record what's been called) and then call the original function with the same parameters. It can get fiddly though :)

answered Jan 03 '13 at 16:25

Stuart Golodetz

20,238
4
51
80

How to monitor a process call in windows using C++

2 Answers2