using System.Diagnostics;

var p = Process.GetProcessesByName("notepad")[0];
p.EnableRaisingEvents = true;
p.Exited += P_Exited;

Console.ReadLine();

void P_Exited(object? sender, EventArgs e)
{
? ? p = Process.Start("notepad");

? ? p.EnableRaisingEvents = true;
? ? p.Exited += P_Exited;
}

using System.Management;

// 查詢進程創(chuàng)建 1秒鐘通知
var qCreate = new WqlEventQuery($"__InstanceCreationEvent", TimeSpan.FromSeconds(1), $"TargetInstance isa \"Win32_Process\" and TargetInstance.Name = 'Notepad.exe'");

// 查詢進程關(guān)閉 1秒鐘通知
var qDelete = new WqlEventQuery($"__InstanceDeletionEvent", TimeSpan.FromSeconds(1), $"TargetInstance isa \"Win32_Process\" and TargetInstance.Name = 'Notepad.exe'");

// 創(chuàng)建事件查詢的監(jiān)聽器
ManagementEventWatcher wCreate = new ManagementEventWatcher(qCreate);
ManagementEventWatcher wDelete = new ManagementEventWatcher(qDelete);

// 注冊事件
wCreate.EventArrived += (sender, e) =>
{
? ? Console.WriteLine($"進程啟動：{GetInfo(e.NewEvent)}");
};

wDelete.EventArrived += (sender, e) =>
{
? ? Console.WriteLine($"進程關(guān)閉：{GetInfo(e.NewEvent)}");
};

// 開始監(jiān)聽
wCreate.Start();
wDelete.Start();
Console.ReadLine();

static string GetInfo(ManagementBaseObject obj)
{
? ? var instance = obj["TargetInstance"] as ManagementBaseObject;
? ? return $"{instance["Name"]}-{instance["ProcessId"]}";
}