Windows in how to determine whether a process is terminated by other processes, or their normal exit

CodePudding user response:

https://techibee.com/sysadmins/find-out-who-killed-a-process-in-windows/2286

CodePudding user response:

https://techibee.com/sysadmins/find-out-who-killed-a-process-in-windows/2286

CodePudding user response:

1. By inference by running time cycle;
2. Through the parent process, check the target process exit code;
3. If the target process was not written by yourself is not so good, monitor, you can try to use objective comparing to the procmon process normal exit and abnormal exit process;
4. Global hook API, related to the termination process logs,,,

CodePudding user response:

There, you're a GUI process based on the news, and others to you send a wm_quit, you have what recruit