Win32_ProcessStopTrace, ROOT\CIMV2\ms_409

Class | Methods | Properties (8) | Qualifiers (4) | Instances | Namespaces (2)
Samples: VB Script | C# | VB.Net | Search on:Microsoft

Description

The ProcessStopTrace event class indicates a process has terminated.

Win32_ProcessStopTrace properties

Win32_ProcessStopTrace has 8 properties (1 Local, 7 Derived)

NameOriginCIMType
ExitStatusWin32_ProcessStopTrace19 [uint32]
ParentProcessIDWin32_ProcessTrace19 [uint32]
ProcessIDWin32_ProcessTrace19 [uint32]
ProcessNameWin32_ProcessTrace8 [string]
SECURITY_DESCRIPTOR__Event17 [uint8]
SessionIDWin32_ProcessTrace19 [uint32]
SidWin32_ProcessTrace17 [uint8]
TIME_CREATED__Event21 [uint64]

Detailed description of Win32_ProcessStopTrace properties

Local properties (1) of Win32_ProcessStopTrace class

▲ ExitStatus property
CIMTYPE'uint32'
Description'The ExitStatus property contains the exit status of the stopped process '
ExitStatus property is in 1 class (Win32_ProcessStopTrace) of ROOT\CIMV2\ms_409 and in 4 namespaces

Derived properties (7) of Win32_ProcessStopTrace class

▲ ParentProcessID property
CIMTYPE'uint32'
Description'The ParentProcessID property identifies of the process that actuallycaused the event to happen.'
ParentProcessID property is in 4 classes of ROOT\CIMV2\ms_409 and in 2 namespaces
▲ ProcessID property
CIMTYPE'uint32'
Description'The ProcessID property identifies the process involved in the event.'
ProcessID property is in 10 classes of ROOT\CIMV2\ms_409 and in 18 namespaces
▲ ProcessName property
CIMTYPE'string'
Description'The ProcessName property contains the name of the process.'
ProcessName property is in 3 classes of ROOT\CIMV2\ms_409 and in 5 namespaces
▲ SECURITY_DESCRIPTOR property
CIMTYPE'uint8'
SECURITY_DESCRIPTOR property is in 79 classes of ROOT\CIMV2\ms_409 and in 142 namespaces
▲ SessionID property
CIMTYPE'uint32'
Description'The SessionID property identifies the session under which the process exists.'
SessionID property is in 7 classes of ROOT\CIMV2\ms_409 and in 16 namespaces
▲ Sid property
CIMTYPE'uint8'
Description'The Sid property is the security identifier representing the user context under which the event happened.'
Sid property is in 14 classes of ROOT\CIMV2\ms_409 and in 142 namespaces
▲ TIME_CREATED property
CIMTYPE'uint64'
TIME_CREATED property is in 84 classes of ROOT\CIMV2\ms_409 and in 142 namespaces

Win32_ProcessStopTrace Qualifiers

NameValueToInstanceToSubclassOverridableAmendedLocal
abstractTrue✓✓✗✗✗
AMENDMENTTrue✗✗✓✗✓
Description'The ProcessStopTrace event class indicates a process has terminated.'✗✓✓✗✓
LOCALE1033✓✗✓✗✓

Win32_ProcessStopTrace System properties

NameValueOriginCIMTypeLocalArray
__PATH'\\.\ROOT\CIMV2\ms_409:Win32_ProcessStopTrace'___SYSTEM8✗✗
__NAMESPACE'ROOT\CIMV2\ms_409'___SYSTEM8✗✗
__SERVER'.'___SYSTEM8✗✗
__DERIVATION['Win32_ProcessTrace', 'Win32_SystemTrace', '__ExtrinsicEvent', '__Event', '__IndicationRelated', '__SystemClass']___SYSTEM8✗✓
__PROPERTY_COUNT8___SYSTEM3✗✗
__RELPATH'Win32_ProcessStopTrace'___SYSTEM8✗✗
__DYNASTY'__SystemClass'___SYSTEM8✗✗
__SUPERCLASS'Win32_ProcessTrace'___SYSTEM8✗✗
__CLASS'Win32_ProcessStopTrace'___SYSTEM8✗✗
__GENUS1___SYSTEM3✗✗

Similar Classes to Win32_ProcessStopTrace

Number of classes:8
Class nameChildsPropertiesMethodsClass
Instances
Child
Instances
AbstractSingleton
Win32_ModuleLoadTrace090--✓-
Win32_ModuleTrace120--✓-
Win32_ProcessStartTrace070--✓-
Win32_ProcessTrace270--✓-
Win32_SystemTrace320--✓-
Win32_ThreadStartTrace080--✓-
Win32_ThreadStopTrace040--✓-
Win32_ThreadTrace240--✓-
comments powered by Disqus
WUtils.com