Watch for new processes and write information about them to the terminal

ProcessWatcher.ps1

# This just writes text to the terminal with Write-Host and isn't useful for long-term monitoring or logging or automation

$job = Register-CimIndicationEvent -Query "SELECT * FROM __InstanceCreationEvent WITHIN 1 WHERE TargetInstance ISA 'Win32_Process'" -SourceIdentifier ProcessWatcher -Action {
    param($sender, $e)
    $p = $e.NewEvent.TargetInstance
    Write-Host "`n---------`n"
    Write-Host "Process: $($p.Name)"
    Write-Host "ProcessId: $($p.ProcessId)"
    Write-Host "Path: $($p.Path)"
    Write-Host "CommandLine:"
    Write-Host "  $($p.CommandLine)"
}


# When you're tired of junk being written to the terminal, remove the background job with...
# $job | Remove-Job -Force