.net WMI process watcher