Win32_ProcessTrace, ROOT\CIMV2\ms_409

Class | Childs (2) | Methods | Properties (7) | Qualifiers (4) | Instances | Namespaces (2)
Samples: VB Script | C# | VB.Net | Search on:Microsoft

Description

This event is the base event for process events.

Win32_ProcessTrace - child subclasses in ROOT\CIMV2\ms_409

Number of classes:2
Class nameChildsPropertiesMethodsClass
Instances
Child
Instances
AbstractSingleton
Win32_ProcessStartTrace070--✓-
Win32_ProcessStopTrace080--✓-

Win32_ProcessTrace properties

Win32_ProcessTrace has 7 properties (5 Local, 2 Derived)

NameOriginCIMType
ParentProcessIDWin32_ProcessTrace19 [uint32]
ProcessIDWin32_ProcessTrace19 [uint32]
ProcessNameWin32_ProcessTrace8 [string]
SECURITY_DESCRIPTOR__Event17 [uint8]
SessionIDWin32_ProcessTrace19 [uint32]
SidWin32_ProcessTrace17 [uint8]
TIME_CREATED__Event21 [uint64]

Detailed description of Win32_ProcessTrace properties

Local properties (5) of Win32_ProcessTrace class

▲ ParentProcessID property
CIMTYPE'uint32'
Description'The ParentProcessID property identifies of the process that actuallycaused the event to happen.'
ParentProcessID property is in 4 classes of ROOT\CIMV2\ms_409 and in 2 namespaces
▲ ProcessID property
CIMTYPE'uint32'
Description'The ProcessID property identifies the process involved in the event.'
ProcessID property is in 10 classes of ROOT\CIMV2\ms_409 and in 18 namespaces
▲ ProcessName property
CIMTYPE'string'
Description'The ProcessName property contains the name of the process.'
ProcessName property is in 3 classes of ROOT\CIMV2\ms_409 and in 5 namespaces
▲ SessionID property
CIMTYPE'uint32'
Description'The SessionID property identifies the session under which the process exists.'
SessionID property is in 7 classes of ROOT\CIMV2\ms_409 and in 16 namespaces
▲ Sid property
CIMTYPE'uint8'
Description'The Sid property is the security identifier representing the user context under which the event happened.'
Sid property is in 14 classes of ROOT\CIMV2\ms_409 and in 142 namespaces

Derived properties (2) of Win32_ProcessTrace class

▲ SECURITY_DESCRIPTOR property
CIMTYPE'uint8'
SECURITY_DESCRIPTOR property is in 79 classes of ROOT\CIMV2\ms_409 and in 142 namespaces
▲ TIME_CREATED property
CIMTYPE'uint64'
TIME_CREATED property is in 84 classes of ROOT\CIMV2\ms_409 and in 142 namespaces

Win32_ProcessTrace Qualifiers

NameValueToInstanceToSubclassOverridableAmendedLocal
abstractTrue✓✓✗✗✗
AMENDMENTTrue✗✗✓✗✓
Description'This event is the base event for process events.'✗✓✓✗✓
LOCALE1033✓✗✓✗✓

Win32_ProcessTrace System properties

NameValueOriginCIMTypeLocalArray
__PATH'\\.\ROOT\CIMV2\ms_409:Win32_ProcessTrace'___SYSTEM8✗✗
__NAMESPACE'ROOT\CIMV2\ms_409'___SYSTEM8✗✗
__SERVER'.'___SYSTEM8✗✗
__DERIVATION['Win32_SystemTrace', '__ExtrinsicEvent', '__Event', '__IndicationRelated', '__SystemClass']___SYSTEM8✗✓
__PROPERTY_COUNT7___SYSTEM3✗✗
__RELPATH'Win32_ProcessTrace'___SYSTEM8✗✗
__DYNASTY'__SystemClass'___SYSTEM8✗✗
__SUPERCLASS'Win32_SystemTrace'___SYSTEM8✗✗
__CLASS'Win32_ProcessTrace'___SYSTEM8✗✗
__GENUS1___SYSTEM3✗✗

Similar Classes to Win32_ProcessTrace

Number of classes:8
Class nameChildsPropertiesMethodsClass
Instances
Child
Instances
AbstractSingleton
Win32_ModuleLoadTrace090--✓-
Win32_ModuleTrace120--✓-
Win32_ProcessStartTrace070--✓-
Win32_ProcessStopTrace080--✓-
Win32_SystemTrace320--✓-
Win32_ThreadStartTrace080--✓-
Win32_ThreadStopTrace040--✓-
Win32_ThreadTrace240--✓-
comments powered by Disqus
WUtils.com