How to obtain additional info from the 'Win32_ProcessStopTrace' class through WMI?
See the question and my original answer on StackOverflowAlthough the documentation does not talk about it, there is indeed a 'ProcessID' property on Win32_ProcessStopTrace and Win32_ProcessStartTrace as both classes derive from Win32_ProcessTrace which has it. You can check this using a tool such as WMIExplorer:
