Windows 10 Is there a way to log process creation and termination events only for a specific program?

  • Thread starter Thread starter ItzTheRav
  • Start date Start date
I

ItzTheRav

Is there a way to log process creation and process termination events only for a specific program? I know how to set Detailed Tracking under Audit Policy Configuration in the Group Policy Editor, and there I have selected to audit only process creation (4688) and termination (4689) events. I also know how to filter the events that are already in the Security event log to only show me events for a specific program. But is there a way to only log events for that specific program in the first place, and not log events for any other programs? As it is now, I get tons of events for other programs being logged and I'm not interested in them, and they're taking a lot of space and making debugging more onerous. Thanks.

Continue reading...
 
You must log in or register to reply here.

Similar threads

I
Windows 10 Logon Event (Event ID 4648). Events only log during a successful remote desktop in to the computer.
Replies
0
Views
6
ItsChefMatt
I
H
Windows 10 why are there very many rapidly occurring events in event log?
Replies
0
Views
16
hub-bubba
H
M
Windows 11 Is there a way to rescan wifi networks within the reset process?
Replies
0
Views
6
MegSulls
M
A
Windows 11 My Event log (only the Admistrative Events) is full of warnings and errors. I have no issue with my laptop(Asus Vivobook (2023)). Should I do somethin
Replies
0
Views
17
Arghyadeep Garai1
A
M
Windows 10 Windows 10 Nothing running and System process is at 8-10%
Replies
0
Views
6
marcusob1
M
Back
Top