Getting alerted when a certain process from a certain user runs

mgaciarz

Hello all,

We have a need to get alerted when a specific process from a specific user account is running on a Windows machine.

Using the Process Monitor for Windows, it looks like there are a couple limitations:

• Can't filter processes by user/owner
• Can only alert when a process goes down.  I want to do the opposite.

I've started going down the route of doing a PowerShell script monitor but wondering if there's an easier way to do this?

Thanks!

mesverrum

Nope that use case is pretty uncommon and will definitely be a scripted kind of thing.