NANY 2019 - Windows App - Process Watcher

[Ath]

The file format I will use is not decided yet, so I advise no one spend any time coding anything yet..

-mouser (November 12, 2018, 03:37 PM)

was waiting until he decided what that format might be in order to test.

-wraith808 (November 12, 2018, 04:02 PM)

And that is why I'm waiting too...

Or put up a request to convert file.

-KodeZwerg (November 12, 2018, 03:34 PM)

The only reason to convert a logfile is just before putting it into something like LogStash, syslog, or another log agregator. Converting just for display is a last resort only, so no, I shouldn't need (to write) me a converter

[nickodemos]

Would it be possible to have a second version that does not include the Microsoft listed files?

Or maybe allow us to create a white list of files to ignore in writing out the log entry. This way if we are trying to track down a specific file we can eliminate ones we already know about.

[mouser]

I may use Protocol Buffers as the data file format. See here: https://www.donation...ndex.php?topic=46840

[wraith808]

I may use Protocol Buffers as the data file format. See here: https://www.donation...ndex.php?topic=46840

-mouser (December 16, 2018, 05:11 AM)

I'd shy away from that for this.  You want them to be human readable, right?  That's been the deciding factor in a lot of cases...

[Shades]

If you don't need or care about data being human readable, try: EDIFACT   

[mouser]

New version uploaded with proper installer (and portable version), and fully functioning right-click tray menu to quickly bring up the log file.

[mouser]

I was planning to add a lot more functionality, but a kitchen renovation went horribly wrong and i've spent the last month cursing my life.  Today what should have been a simple kitchen cabinet repainting job shit the bed and we're back to square -5.

[mouser]

Another inconvenience.. Because I wrote this is plain old visual studio for maximum efficiency, there is no normal fancy GUI for options like I normally write.. In fact in the current incarnation there is only one option, whether to start with windows or not.. It's on by default but you can change that setting by editing the ProcessWatcher.ini file and changing the StartWithWindows setting to 0.

[anandcoral]

I was planning to add a lot more functionality, but a kitchen renovation went horribly wrong and i've spent the last month cursing my life.  Today what should have been a simple kitchen cabinet repainting job shit the bed and we're back to square -5.

-mouser (December 31, 2018, 08:37 PM)

Welcome to Husbands Club.
We all go through this patch in the beginning years then we get habituated

Regards,

Anand

[Asudem]

Avast seems to terminate the process and won't let the installer run, insisting I submit it to them for analysis. I have not done so yet, but just a heads up.

NANY 2019 - Windows App - Process Watcher

I have never, EVER, seen such behavior from it before...

EDIT: It seems to have sent something without my permission, but it does indeed give me an opportunity! I have installed the software, disabling the shields, and reactivated the software, seeing what, if anything, avast does to it, and what, if anything, avast updates with to let them know the file's signature is safe or not.

[mouser]

How strange!
Can you try the portable version and see if it complains about that one?

ps.
If anyone wants me to build a 32-bit build, just let me know.

[Asudem]

NANY 2019 - Windows App - Process Watcher

I am forever referring to programmers as "Rare File Architects" henceforth... okay, maybe not...

Avast informed me the installer version was just fine though!

[scottf200]

It would seem useful to have a pop up bubble or something when new and/or update processes happen and entries were added to the log.  Otherwise are people supposed to look at this after they discover something going awry?  Or after they add/update something to see what it did.  ie. proactive vs reactive

[update]
Perhaps something like the options ... alarms/alerts section in Process Piglet that I just started trying.
[/update]

[mouser]

It would seem useful to have a pop up bubble or something when new and/or update processes happen and entries were added to the log.

agreed, will be added soon.

[subie]

Hello,

Is there any way to read the log file in a table form like in excel?

the log file is showing
"NEW PROCESS" : {
    "File" : "C:\Windows\System32\svchost.exe",
    "ID" : "1",
    "Size" : "47.55kb",
    "Discovered" : "Nov 27, 2019 - 12:02 PM"

what im thinking is

|Status            | File                                              | ID | Size      | Discovered                    |
|NEW PROCESS|C:\Windows\System32\svchost.exe| 1    |47.55kb| Nov 27, 2019 - 12:02 PM|


 
Thank you!