Hello,
I would like to find out what process starts a particular windows service (msiserver to be exact).
I mean not in the sense whats is the parent process, this is always services.exe
but which process called some API that resulted in the SCM starting the service.
It seams in win 7 and such there was a Event Log Event created by the SCM for that: https://stackoverflow.com/questions/496632/is-it-possible-to-log-who-started-or-stopped-a-windows-service
but in windows 10 its no longer present.
Any ideas?