11 2024 档案

powershell监控windows新增进程(类似pspy)
摘要：Register-WmiEvent -Q "SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_Process'" -SourceIdentifier ProcessStart -A{if(-n 阅读全文
posted @ 2024-11-23 12:57 bfa-hawk 阅读(1) 评论(0) 推荐(0) 编辑