Windows generates an event ID 4688https://system32.eventsentry.com/security/event/4688 in the Windows Security Event Log when a process gets launched. In EventSentry an include filter that monitors for those events needs to be created and associated with an email action so that an email alert is sent once this specific process gets starte...

KB-ID 457
Category: Event Log Monitoring
Applies to: all