Win32-ThreadStartTrace - WMI VBScript sample

The foundations for Manageability in Windows 2019/2016/2012/2008 and Windows 10/7/XP are Windows Management Instrumentation (WMI; formerly WBEM) and WMI extensions for Windows Driver Model (WDM).

ActiveXperts Network Monitor provides the ability to build monitor check routines based on WMI. ActiveXperts has collected more than a hundred WMI samples. You can use these samples as a base for new check routines you can write yourself.

On this site, you can find many WMI samples.

The Win32_ThreadStartTrace WMI class can be used in ActiveXperts Network Monitor to monitor your servers.

---

Win32-ThreadStartTrace

Example(s)

  On Error Resume Next
strComputer = "."
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_ThreadStartTrace",,48)
For Each objItem in colItems
    Wscript.Echo "ProcessID: " & objItem.ProcessID
    Wscript.Echo "SECURITY_DESCRIPTOR: " & objItem.SECURITY_DESCRIPTOR
    Wscript.Echo "StackBase: " & objItem.StackBase
    Wscript.Echo "StackLimit: " & objItem.StackLimit
    Wscript.Echo "StartAddr: " & objItem.StartAddr
    Wscript.Echo "ThreadID: " & objItem.ThreadID
    Wscript.Echo "TIME_CREATED: " & objItem.TIME_CREATED
    Wscript.Echo "UserStackBase: " & objItem.UserStackBase
    Wscript.Echo "UserStackLimit: " & objItem.UserStackLimit
    Wscript.Echo "WaitMode: " & objItem.WaitMode
    Wscript.Echo "Win32StartAddr: " & objItem.Win32StartAddr
Next