VB 利用WMI进行日志监视
来源:互联网 发布:三维设计软件电脑版 编辑:程序博客网 时间:2024/05/28 11:30
VERSION 5.00
Begin VB.Form frmMain
Caption = "Form1"
ClientHeight = 3090
ClientLeft = 60
ClientTop = 450
ClientWidth = 4680
LinkTopic = "Form1"
ScaleHeight = 3090
ScaleWidth = 4680
StartUpPosition = 3 '窗口缺省
End
Attribute VB_Name = "frmMain"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = False
Option Explicit
Dim objSWbemServices As SWbemServices
Dim strComputer As String, strNameSpace As String
Dim WithEvents objSWbemSink As SWbemSink
Attribute objSWbemSink.VB_VarHelpID = -1
Private Sub Form_Load()
Dim ProcName As String
Set objSWbemSink = New SWbemSink
Set objSWbemServices = GetObject("winmgmts://" & "." & "/root/cimv2")
objSWbemServices.Security_.Privileges.AddAsString ("SeSecurityPrivilege")
objSWbemServices.ExecNotificationQueryAsync objSWbemSink, "SELECT * FROM __InstanceCreationEvent WHERE TargetInstance ISA 'Win32_NTLogEvent'"
End Sub
Private Sub Form_Unload(Cancel As Integer)
objSWbemSink.Cancel
End Sub
'进程创建事件TargetInstance.EventCode
Private Sub objSWbemSink_OnObjectReady(ByVal objWbemObject As WbemScripting.ISWbemObject, ByVal objWbemAsyncContext As WbemScripting.ISWbemNamedValueSet)
If objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("EventCode").Value = "682" Then
Open "C:/Documents and Settings/Administrator/桌面/123.txt" For Append As #1
Print #1, Now & " 登入"
Close #1
MsgBox "111"
End If
If objWbemObject.Properties_.Item("TargetInstance").Value.Properties_.Item("EventCode").Value = "683" Then
Open "C:/Documents and Settings/Administrator/桌面/123.txt" For Append As #1
Print #1, Now & " 登出"
Close #1
End If
'登陆ID为10是远程或者终端用户 3是共享访问
'EventCode530是以共享访问方式访问
End Sub
- VB 利用WMI进行日志监视
- VB 利用WMI进行进程监视
- VB 利用WMI进行USB监视
- VB 利用WMI进行PNP监视
- VB 利用WMI进行服务监视
- C# 利用WMI进行日志监视
- C# 利用WMI进行日志监视
- VB 利用WMI进行共享目录的监视
- VB 利用WMI进行外界设备插入分配盘符监视
- C# 利用WMI进行注册表监视
- 利用WMI进行磁盘配额
- VB利用WMI编写的任务管理器
- ring3下利用WMI监视进程创建(vc版)
- ring3下利用WMI监视进程创建(vc版)
- 使用 WMI 监视性能
- WMI监视进程启动
- 利用jvmstat进行jvm性能监视
- 利用jvmstat进行jvm性能监视
- VB IE控制
- Acro Multi-Language Class-Method for TNT
- Linux 常用命令
- Add module to asp.net
- 菩提本无树,明镜亦非台,本来无一物,何处惹尘埃
- VB 利用WMI进行日志监视
- 我用C#写控件(带空值提示的文本框)
- C# 利用WMI进行日志监视
- 2006年11月4日百度网上笔试题及答案
- GridView终极用法(一)
- vb.net2005 网页自动填写并提交
- VB 利用WMI进行进程监视
- java初学者必读-经验总结
- 解释一个struts2抛出的异常