wmic和eventtrigger

 

以下代码是用来检索特定windows event,并调用子模块

@set params=

@wmic ntevent where eventcode=%1 get message |findstr /v /i "message" > 1.tmp

@if exist "1.tmp"

( for /f "tokens=1 delims=," %%i in (1.tmp) do @if not defined params set params=%%i )

@if defined params call sqr.bat %params% @set params=

 

以下代码就是sqr.bat,返回接到的参数

@echo "my msg is: " %1 , %2 > mac.dat