Stack Exchange network consists of 183 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.
From time to time a cmd windows popps up (or two of them) for a split second I cannot track what was started. Is there a way to monitor the cmd/powershell window? Sysmon?
Or is there a way to force cmd window to not close when command finishes?
The main issue is that I cannot see what command was started
Yes, both will. Sysmon shows it in the eventlog, procmon shows it in the process details. For a one of situation, procmon would be the easier choice. Do make sure you don't hang up your computer by letting the log grow to large.
@koller23 - I'm curious what it is :). I remember a similar issue on my machine that turned out to be a Windows update problem (nothing to worry about but annoying).