IProcess Interface

Definition

Namespace:

Microsoft.Windows.EventTracing.Processes

Assembly:

Microsoft.Windows.EventTracing.Processes.dll

Defines a process in a trace.

public interface IProcess

type IProcess = interface

Public Interface IProcess

Properties

CommandLine	Gets the command line of the process.
CreateStack	Gets the stack that resulted in the process being created.
CreateTime	Gets the timestamp at which the process was created, if available.
Duration	Gets the time during which the process existed, if any.
ExitCode	Gets the exit code value that the process specified when it terminated.
ExitStack	Gets the stack that resulted in the process exiting.
ExitTime	Gets the timestamp at which the process exited, if any.
Id	Gets the ID of the process.
ImageName	Gets the name of the image associated with the process.
Images	Gets a list of the images that were loaded into the process.
ObjectAddress	Gets the address of the kernel object for the process.
Package	Gets information about the modern packaging metadata associated with the process, if any.
Parent	Gets the parent of the process, if any.
ParentId	Gets the ID of the parent process.
SessionId	Gets the Terminal Services session identifier for the process.
User	Gets the SecurityIdentifier of the user identity for the process.

Methods

GetImage(TraceTimestamp, Address)

Gets an image loaded into the process.

Extension Methods

GetHostedServices(IProcess, IServiceDataSource, TraceTimestamp)