This dialog allow two things:
1) Specify current running process to hook or unhook
2) Define filters for automatic hooking of starting applications
The list shows you current hooked processes.
If you want to hook another running process,
just check it in the list; and if you want to unhook it, just uncheck it.
Changes will be apply as soon as you click the "OK" button.
This dialog allows you to define filters to automaticaly hook starting application .
To be hooked, application needs to match one Inclusion filter AND one Exclusion filter AND one parent process ID.
If a field is let empty, filter is concidered as matching. It means that if you let all the fields to empty, all new processes will be hooked.
If you don't want to hook any new process, just put "*" in the "Exclusion filter".
Inclusion Filters |
Application name must match at least one filter to be hooked
Example "no*;calc*" will hook all created application begining with "no" or "calc" |
Exclusion Filters |
Application name musn't match any filter to be hooked
Example "no*;calc*" will hook all new created processes execepted those begining with "no" or "calc" |
Parent Process ID |
The process launching the new application must have an ID specified in the list;
else launched application won't be hooked. (you can use decimal or hex).
Use ";" to split and "Min-Max" for including all numbers from min to max
Example : 100;101;105;203-220;0x300;0x320-0x330 |
Include 32 bits Processes (x64bits version only) |
If checked, 32 bits processes are including according to previous filters
If unchecked, 32 bits processes are discard whatever previous filters result is
|
Include 64 bits Processes (x64bits version only) |
If checked, 64 bits processes are including according to previous filters
If unchecked, 64 bits processes are discard whatever previous filters result is
|
|
|
All defined monitoring files and/or overriding dll,
are automatically loaded in new hooked processes |
|