This script checks if notepad.exe is running more that 4 times. If it is running more than 4 times a event is generated. You can then\u00c2\u00a0collect those event and get an alert in operators console.<\/p>\n
This script checks if notepad.exe is running more that 4 times. If it is running more than 4 times a event is generated. You can then\u00c2\u00a0collect those event and get an alert in operators console. strComputer = “.” Set objWMIService = GetObject(“winmgmts:\\\\” & strComputer & “\\root\\cimv2”) Set objShell = CreateObject(“Wscript.Shell”)Set colProcesses = objWMIService.ExecQuery _ (“Select … Continue reading
\nstrComputer = \".\"<\/code> <\/code>Set objWMIService = GetObject(\"winmgmts:\\\\\" & strComputer & \"\\root\\cimv2\")
\nSet objShell = CreateObject(\"Wscript.Shell\")<\/code>Set colProcesses = objWMIService.ExecQuery _
\n(\"Select * from Win32_Process Where Name = 'notepad.exe'\")
\nIf colProcesses.Count < 4 Then\nConst EVENT_WARNING = 2\nSet objShell = CreateObject(\"Wscript.Shell\")\nobjShell.LogEvent EVENT_WARNING, _\n\"There are less then 4 instances of notepad.exe running\"\nEnd If\n\n<\/code><\/code><\/p>\n","protected":false},"excerpt":{"rendered":"