Home/ Questions/Q 6596087
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-25T18:01:43+00:00

I need to track to a log when a service or application in Windows

  • 0

I need to track to a log when a service or application in Windows is started, stopped, and whether it exits successfully or with an error code.

I understand that many services do not log their own start and stop times, or if they exit correctly, so it seems the way to go would have to be inserting a hook into the API that will catch when services/applications request a process space and relinquish it.

My question is what function do I need to hook in order to accomplish this, and is it even possible? I need it to work on Windows XP and 7, both 64-bit.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I think your best bet is to use a device driver. See PsSetCreateProcessNotifyRoutine.

    • 0