68 Part II: WMI Queries and Events
thing. I am looking for running processes, and the IS NOT NULL operator returns a lot of pro-
cesses with a PID of 0. Zero, as you might recall from the earlier discussion, is not the same
thing as NULL, and so these process IDs slip through the filter. To compensate for this, I use
a simple If (objItem2.ProcessID) > 0 then construction. This helps achieve the desired result.
The other item tha
t is of interest is the write to log file subroutine. For testing purposes, this
is a really nice sub because it writes the output to a file on the desktop, making it easy to find.
If you want to see what has changed in the services and processes running on a machine, run
the script with two different output files ...