Monitors the first occurrence of a WMI instance modification event for Win32_Process, using the WMI system class __InstanceModificationEvent.

Visual Basic
Edit|Remove
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colMonitorProcess = objWMIService.ExecNotificationQuery _
 ("SELECT * FROM __InstanceModificationEvent WITHIN 1" & _
 "WHERE TargetInstance ISA 'Win32_Process'") 
WScript.Echo "Waiting for process to be modified ..."
Set objLatestEvent = colMonitorProcess.NextEvent
Wscript.Echo VbCrLf & "Process Name: " & objLatestEvent.TargetInstance.Name
Wscript.Echo "Process ID: " & objLatestEvent.TargetInstance.ProcessId
WScript.Echo "Time: " & Now