ProcExp or similar tool to show WHEN a window was first opened.

rberke
rberke used Ask the Experts™
on
How can I use procexp64  to tell  WHEN a specific window was opened?

For example

At 10:00 AM I open MS Word Test.docx and it is the only window open.
At 10:05 AM I customize Word's Quick Access Toolbar by taking the "More Commands" option which opens a second "Word Options" window with bunches of choices that are not related to this question.

ProcExp64 has a "Find Window's Process" tool which is a circular icon that I call the "magic bullseye".

I drag the bullseye over the Test.Docx window and see the process is WINWORD.EXE with PID =6160
But, I drag the bullseye over the Word Options window, and I see the the same PID=6160.

Is there anyway to get ProcExp to give me the time each of the two windows were first opened?

I am trying to get better at using procexp, so do not give me answers that are specific to the  MS Word example.  I want answers that apply to multiple applications.

And, if ProcExp cannot do what I want, are there other spy tools that can?

rberke

P.S.  Recently I have been troubleshooting an annoying problem.  At night I close my laptop lid but the computer keeps running.  In the morning there is a message that popped up. It would be very useful to know when the message first appeared. But, this EE question  should focus entirely on the general question "when did a window first open?" .
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
PeeterBIT Support Tech

Commented:
.. just a quick comment here (because it's a while since I've tried either of the tools)  but, Process Monitor seems to have more sophisticated options for doing full process tracing ...
rberkeConsultant

Author

Commented:
PeeterB, thanks for you comment.  But it does not help solve my problem.
Test your restores, not your backups...
Top Expert 2016
Commented:
I'm not aware of forensic breadcrumbs that Windows stores for every opening of a window so I'm not sure you can get this after the fact if you haven't instrumented for it ahead of time.  I'm sure there are "logger" type spyware tools out there that do this sort of thing and are used for dishonest purposes, but I don't swim in those waters so can't speak to those.

One thought I did have though, is if you are just trying to track down when a GUI window opens, you could leave a basic automatic screen capture utility running and then examine the time sequenced captures the next day.  It's not too elegant, but it might get you the answer to your question, when did this happen.

Below are a couple that seem like they might do the job (I haven't used either before, I just use a couple of manual screen capture tools myself).  One of them even has a feature that basically says only take a new screen capture at the next designated interval if a threshold number of pixels have changed.  This could help reduce the redundant images of the same screen state over and over, and reduce disk space usage, and review time.

If you think this might work here are the couple I saw quickly, but I'm sure you can find others too.



»bp
rberkeConsultant

Author

Commented:
Not  an ideal answer, but it is the best one I have seen.  Thanks for your help

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial