Say I have a code:
public void StartThreadWatch()
{
EventQuery query = new EventQuery
("SELECT * FROM _InstanceCreationEvent WITHIN 1 " +
"WHERE TargetInstance ISA 'Win32_Process'";
ManagementEventWatcher watcher =
new ManagementEventWatch(query);
watch.EventArrived += EventArrived;
watch.Start();
}
I don't know what is 'ISA' in the query...
ISA
is an operator of the WQL
language used to query the subclasses of a specified WMI class.
For more info check these msdn links